home

cp.fookseo.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cp.fookseo.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in May of 2014. The hosted servers are located in Saquarema, Rio De Janeiro within Brazil which resides on the Latin American and Caribbean IP address Regional Registry network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Rio De Janeiro, Brazil (BR)

Create date:
Thursday, May 8, 2014

Expires date:
Sunday, May 8, 2016

Updated date:
Thursday, January 21, 2016

ASN:
AS262377 EMMEX - DATA CENTER,BR

Root domain:
fookseo.com

Whois:
1 fookseo.com record

The domain cp.fookseo.com has been seen to resolve to the following 2 IP addresses.

209.99.40.222
209-99-40-222.fwd.datafoundry.com
May 22, 2016

177.128.178.130
br01.ferenz.com.br
February 10, 2016

File downloads found at URLs served by cp.fookseo.com.

0 / 68
http://cp.fookseo.com/PHmqd  (setup-ocolast-re.exe)

0 / 68
http://cp.fookseo.com/AW7Is  (ocolast-setup.exe)

0 / 68
http://cp.fookseo.com/PHmqd  (setup-ocolast-re.exe)

The following 47 files have been seen to comunicate with cp.fookseo.com in live environments.

TCP » 209.99.40.222:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
online-guardian-v2.0.9.exe

TCP » 209.99.40.222:80
msn.exe

TCP » 209.99.40.222:80
apptrailers.exe

TCP » 209.99.40.222:80
y03fd24.tmp

TCP » 209.99.40.222:80
lliseconc8.exe

TCP » 209.99.40.222:80
megacubo.exe (Megacubo by www.megacubo.net)

TCP » 209.99.40.222:80
messengertime.exe

TCP » 209.99.40.222:80
ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
browser.exe (speed browser by Smart Applications)

 
Latest 20 of 53 files

URL:
http://cp.fookseo.com/

Title:
“Painel do Usuário - FookADS”

Description:
“Acesso somente para assinantes FookADS.”

Web server:
Apache (PHP/5.5.32)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.