Domain > gallatinriver.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to gallatinriver.net

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
d2f2c9e7b5d32c5114a2f8511d9efcc2
a472f9d1a78fa6cb3eb6896d9c319726	[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
ddeca0855c9bb584c270ff6c5f0521c2	[Artemis!DDECA0855C9B] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qij] [UnclassifiedMalware] [TR/Dldr.Cutwail.4] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PH] [W32/Kryptik.AX!tr] [Trj/CI.A]
a02dbc158de4bc680950fa18c5122dc0
a0b0bde17bb93f2af14fcc3771aef4f3
64d63f2465d931818539beff1ca66a34	[Crypt2.AATE] [TR/Rogue.1134088]
5e6ffe3abdc1caa35ee40b0a1908bf4c	[Win32/Tnega.XfYFUAD] [BackDoor.Bulknet.967] [Win32/Injector.AIRV] [W32/Injector.AHLB!tr] [Trojan-Downloader.Win32.Karagany] [Trojan.Crypt.NKN] [PWS-Zbot-FAQD!5E6FFE3ABDC1] [TrojanDownloader*Win32/Cutwail.BS] [winpe/Kryptik.CBZD] [TROJ_FIDOBOT.SM0] [Trojan.Buzus]
57be65340d0a4336f525d108862ccf50
180ca5d4cc13a8e8aee4156b2ee389c5
34961ffc0f75d89da0b9464a4c7a02b1	[Backdoor.Win32.Pushdo.qag] [BackDoor.Bulknet.893] [Win32.Heur.KVMF58.hy.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Trojan-Downloader.Win32.Cutwail]
d3be3c4282a9d5158080d8023e5f2efa	[TrojanRansom.Foreign.cyzc] [Fake-Rena-FNQ!D3BE3C4282A9] [Trojan.Inject.RRE] [Trojan] [WS.Reputation.1] [TROJ_RANSOM.FCN] [Trojan-Ransom.Win32.Foreign.cyzc] [UnclassifiedMalware] [Trojan.PWS.Panda.547] [TR/Ransom.Foreign.cyzc] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/Injector] [Trojan/Win32.Foreign] [W32/Trojan.CVXL-5426] [Virus.Win32.Cryptor] [W32/Injector.ZVR!tr] [Win32/Cryptor] [Trj/Dtcontx.E]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
ea21595001334cf75d1f82adadaefb20
680438c58773658c1905d58c040f78d4	[VirTool*Win32/Injector.CL]
f14ca0281fdf75a0f52f52b66e6884ea
b7d2d2a8a4d14b8b74cc88009e28ae66	[Trojan/W32.Small.41984.VJ] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS5] [Downloader-FKK!B7D2D2A8A4D1] [Suspicious.Cloud.5] [Pushdo.J] [BKDR_PUSHDO.SMP] [Backdoor.Win32.Pushdo.pvu] [Trojan.Win32.Pushdo.cramya] [Backdoor.Win32.Pushdo.41984.B] [Trojan.Inject1.19222] [Backdoor/Pushdo.yv] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Pushdo] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PVU!tr.bdr]
43415b6d9537a142cec2c22c31f8bfae	[Cutwail-FBYD!43415B6D9537] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo.qev] [Trojan.Kryptik!NPQTFtfoX4A] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Artemis!43415B6D9537] [TrojanDownloader:Win32/Cutwail] [Trojan.CryptCQK] [W32/Pushdo.QEV!tr.bdr] [Crypt.CCQK] [Trj/Dtcontx.E]
f7dd2cdcc0b90b7d7b2ff3cfb540c796	[Cutwail-FBYD!F7DD2CDCC0B9] [Trojan.PPush] [Trojan.Win32.Bulknet.brrije] [TROJ_DLOAD.RC] [Trojan.Kryptik!QNluqFEr0aI] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Troj/Cutwail-AM] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan.CryptDTE] [Crypt.CDTE] [Trj/CI.A]

Whois

Property	Value
Name	Domain Administrator
Organization	CenturyLink, Inc.
Email	domains@centurylink.com
Address	100 CenturyLink Dr.
Zip Code	71203
City	Monroe
State	LA
Country	US
Phone	+1.3183889000
Fax	+1.3183889000
NameServer	dns1.mebtel.net
Created	1998-12-03 05:00:00
Changed	2015-11-28 06:34:59
Expires	2016-12-02 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2013-06-19	208.47.185.65 (ClassC)
2014-09-08	69.168.97.85 (ClassC)
2020-12-30	69.168.97.85 (ClassC)
2026-02-22	129.159.71.219 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]