home

516516745.r.cdn77.net

DataCamp Limited

Domain Information

The domain 516516745.r.cdn77.net registered by DataCamp Limited was initially registered in February of 2012 through TUCOWS DOMAINS INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
TUCOWS DOMAINS INC.

Server location:
England, United Kingdom (GB)

Create date:
Tuesday, February 21, 2012

Expires date:
Monday, February 21, 2022

Updated date:
Tuesday, September 1, 2015

ASN:
AS60068 CDN77 Datacamp Limited, GB

Root domain:
cdn77.net

Whois:
1 cdn77.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

K7 AntiVirus
Unwanted-Program
100.00%

Trend Micro House Call
Suspici.CF2FA188
100.00%

avast!
Multi:BitCoinMiner-B [PUP]
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

ESET NOD32
Win32/BitCoinMiner.BY potentially unsafe (variant)
100.00%

Baidu Antivirus
Hacktool.Win32.BitCoinMiner
100.00%

Reason Heuristics
PUP.Amonitize.Installer
100.00%

The domain 516516745.r.cdn77.net has been seen to resolve to the following IP address.

185.59.221.23
london-20.cdn77.com
April 19, 2016

File downloads found at URLs served by 516516745.r.cdn77.net.

7 / 68      (Adware)
http://516516745.r.cdn77.net/cdn.exe  (c62621e16ad5e19161593c733b47cf06)

The following 12 files have been seen to comunicate with 516516745.r.cdn77.net in live environments.

TCP » 185.59.221.23:80
jingling.exe

TCP » 185.59.221.23:80
sys.exe

TCP » 185.59.221.23:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 185.59.221.23:443
UCBrowser.exe (by UCWeb)

TCP » 185.59.221.23:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 185.59.221.23:80
browserair.exe (BrowserAir by Goobzo)

TCP » 185.59.221.23:80
UCBrowser.exe (by UCWeb)

TCP » 185.59.221.23:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.221.23:443
wikithemes.exe

TCP » 185.59.221.23:80
jingling.exe

TCP » 185.59.221.23:80
mbtipv32.exe

TCP » 185.59.221.23:443
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 185.59.221.23:80
jingling.exe

URL:
http://516516745.r.cdn77.net/

Title:
“Your Push Zone has been created.”

Web server:
CDN77-Turbo

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.