Domain > gamma-burst.com

More information on this domain is in AlienVault OTX

Files that talk to gamma-burst.com

MD5	A/V
df902d85a5aebee35007be327e9f54d2	[HW32.CDB.7c9b] [Malware.Packer.FFS] [Mal/FakeAV-UF] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Symmi]
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]
dde053529fc90359815908c8ee1def65	[FakeSecTool-FCX!DDE053529FC9] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]
914c63052f0694efe5c231d14c135d36	[HW32.CDB.D6a5] [TrojanPSW.Tepfer.r3] [Trojan.PWS.Tepfer!8N7nPFhLHXs] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twri] [Trojan.Win32.Kryptik.cxajaq] [Mal/FakeAV-UF] [UnclassifiedMalware] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Tepfer.CASL!tr.pws] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois

Property	Value
Email	DAVID-NIC@SHANE.COM
NameServer	DNS2.REGISTRAR-SERVERS.COM
Created	1996-09-27 00:00:00
Changed	2015-12-16 00:00:00
Expires	2016-09-26 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2014-01-12	192.64.119.90 (ClassC)
2024-06-07	199.59.243.225 (ClassC)
2024-12-28	199.59.243.227 (ClassC)

HTTP/1.1 200 OKdate: Tue, 09 Apr 2024 08:43:05 GMTcontent-type: text/html; charsetutf-8content-length: 1046x-request-id: a71941bd-3ff6-493b-9100-26b7082b053bcache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_X6pP/yuAxazIfDJh4ihH+XbiwbCl8UQM6f9vMfAhNVWhIl0eIJdJ5ohtONXk+t6hYJmDqURwOAa+D08bnHIVFA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYTcxOTQxYmQtM2ZmNi00OTNiLTkxMDAtMjZiNzA4MmIwNTNiIiwicGFnZV90aW1lIjoxNzEyNjUyMTg2LCJwYWdlX3VybCI6Imh0dHA6Ly9nYW1tYS1idXJzdC5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0IjoiZ2FtbWEtYnVyc3QuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/bxHYgFHZj.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 09 Apr 2024 08:43:05 GMTContent-Type: text/html; charsetutf-8Content-Length: 1050X-Request-Id: c4db3ef9-12a9-4da7-9aab-51f4fafaa36fCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_X6pP/yuAxazIfDJh4ihH+XbiwbCl8UQM6f9vMfAhNVWhIl0eIJdJ5ohtONXk+t6hYJmDqURwOAa+D08bnHIVFA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYzRkYjNlZjktMTJhOS00ZGE3LTlhYWItNTFmNGZhZmFhMzZmIiwicGFnZV90aW1lIjoxNzEyNjUyMTg2LCJwYWdlX3VybCI6Imh0dHBzOi8vZ2FtbWEtYnVyc3QuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6ImdhbW1hLWJ1cnN0LmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bgdfMbptv.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gamma-burst.com

Is this malicious?

Files that talk to gamma-burst.com

Whois

DNS Resolutions

Port 80

Port 443