cdn.mp3rocketdownloadfiles.com

Communigal Communication Ltd

Domain Information

The domain cdn.mp3rocketdownloadfiles.com registered by Communigal Communication Ltd was initially registered in June of 2015 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Dublin City, Ireland (IE)

Create date:
Wednesday, June 10, 2015

Expires date:
Friday, June 10, 2016

Updated date:
Wednesday, June 10, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MP3TechSupport.Installer (M), Win32.Generic.SCCE.Installer.Meta, PUP.OpenCandy (M)
100.00%

Dr.Web
Adware.OpenCandy.163, Adware.OpenCandy.171
83.33%

Zillya! Antivirus
Downloader.Agent.Win32.260269, Downloader.Agent.Win32.248040, Trojan.Kryptik.Win32.805012
75.00%

K7 AntiVirus
Unwanted-Program
75.00%

ESET NOD32
Win32/OpenCandy.A potentially unsafe (variant), Win32/OpenCandy.E potentially unsafe (variant)
75.00%

VIPRE Antivirus
Trojan.Win32.Generic, Opencandy
75.00%

Baidu Antivirus
Adware.Win32.OpenCandy
75.00%

Fortinet FortiGate
Riskware/OpenCandy
70.83%

McAfee
Artemis!874B82E3F4B0, Artemis!9834C63403AD, Artemis!34200D3C38EB, Artemis!881710870ED5, Artemis!087198B1243C, Artemis!816B0F60CDEA, Artemis!57972EA1C2B2, Artemis!6040E30462D3, Artemis!997BFFD78835, Artemis!C1B40E9E46B5
66.67%

Agnitum Outpost
Riskware.Agent
58.33%

AVG
Generic
54.17%

Trend Micro House Call
Suspicious_GEN.F47V0418, Suspicious_GEN.F47V0413
54.17%

Bkav FE
W32.HfsAdware
54.17%

Kaspersky
not-a-virus:Downloader.Win32.Agent
54.17%

Sophos
Generic PUA JB
54.17%

The domain cdn.mp3rocketdownloadfiles.com has been seen to resolve to the following 28 IP addresses.

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
July 7, 2016

June 27, 2016

ec2-52-34-254-156.us-west-2.compute.amazonaws.com
May 25, 2016

ec2-52-40-74-243.us-west-2.compute.amazonaws.com
May 25, 2016

ec2-54-148-241-40.us-west-2.compute.amazonaws.com
May 24, 2016

ec2-52-35-246-224.us-west-2.compute.amazonaws.com
May 12, 2016

ec2-52-10-47-132.us-west-2.compute.amazonaws.com
May 12, 2016

ec2-52-25-167-148.us-west-2.compute.amazonaws.com
May 5, 2016

ec2-52-32-132-26.us-west-2.compute.amazonaws.com
April 7, 2016

ec2-52-35-220-181.us-west-2.compute.amazonaws.com
April 6, 2016

ec2-54-191-197-143.us-west-2.compute.amazonaws.com
April 5, 2016

ec2-54-149-89-171.us-west-2.compute.amazonaws.com
March 4, 2016

ec2-52-35-72-231.us-west-2.compute.amazonaws.com
March 3, 2016

ec2-52-89-243-234.us-west-2.compute.amazonaws.com
February 27, 2016

ec2-52-10-249-85.us-west-2.compute.amazonaws.com
February 22, 2016

ec2-54-191-172-222.us-west-2.compute.amazonaws.com
February 22, 2016

ec2-54-148-9-47.us-west-2.compute.amazonaws.com
February 6, 2016

ec2-52-34-68-233.us-west-2.compute.amazonaws.com
February 4, 2016

ec2-52-27-150-245.us-west-2.compute.amazonaws.com
February 4, 2016

ec2-52-26-157-183.us-west-2.compute.amazonaws.com
January 4, 2016

ec2-52-24-190-232.us-west-2.compute.amazonaws.com
December 23, 2015

ec2-54-218-31-78.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-52-24-18-121.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-54-69-118-66.us-west-2.compute.amazonaws.com
October 20, 2015

ec2-54-68-20-190.us-west-2.compute.amazonaws.com
August 27, 2015

ec2-52-27-141-103.us-west-2.compute.amazonaws.com
August 13, 2015

ec2-52-10-215-165.us-west-2.compute.amazonaws.com
August 13, 2015

ec2-54-201-96-232.us-west-2.compute.amazonaws.com
August 11, 2015

File downloads found at URLs served by cdn.mp3rocketdownloadfiles.com.

 
Latest 30 of 153 download URLs

The following 218 files have been seen to comunicate with cdn.mp3rocketdownloadfiles.com in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 222 files