ddee2026b3b2e9c3c02dd7d137fdf959.renovacaofatura.com

China Capital Investment Limited

Domain Information

The domain ddee2026b3b2e9c3c02dd7d137fdf959.renovacaofatura.com registered by China Capital Investment Limited was initially registered in April of 2015 through REGISTER.COM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Antonio, Texas within the United States.
Registrar:
REGISTER.COM, INC.

Server location:
Texas, United States (US)

Create date:
Thursday, April 30, 2015

Expires date:
Saturday, April 30, 2016

Updated date:
Monday, November 2, 2015

ASN:
AS33070 RMH-14 - Rackspace Hosting,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Gen:Trojan.Heur.PT.cm0@bOcpARoG
100.00%

K7 AntiVirus
Trojan
100.00%

Agnitum Outpost
Trojan.DL.Genome
100.00%

Norman
Suspicious_Gen2.WDHEG
100.00%

Trend Micro House Call
TROJ_GEN.R047H09E715
100.00%

avast!
Win32:Malware-gen
100.00%

Kaspersky
Trojan-Downloader.Win32.Genome
100.00%

Bitdefender
Gen:Trojan.Heur.PT.cm0@bOcpARoG
100.00%

Lavasoft Ad-Aware
Gen:Trojan.Heur.PT.cm0@bOcpARoG
100.00%

F-Secure
Gen:Trojan.Heur.PT.cm0@bOcpARoG
100.00%

Emsisoft Anti-Malware
Gen:Trojan.Heur.PT.cm0@bOcpARoG
100.00%

ESET NOD32
probably unknown NewHeur_PE
100.00%

Avira AntiVirus
TR/VB.Downloader.Gen
100.00%

G Data
Gen:Trojan.Heur.PT.cm0@bOcpARoG
100.00%

McAfee
RDN/Downloader.a!vn
100.00%

The domain ddee2026b3b2e9c3c02dd7d137fdf959.renovacaofatura.com has been seen to resolve to the following IP address.

April 14, 2016

File downloads found at URLs served by ddee2026b3b2e9c3c02dd7d137fdf959.renovacaofatura.com.

The following 4 files have been seen to comunicate with ddee2026b3b2e9c3c02dd7d137fdf959.renovacaofatura.com in live environments.

URL:
http://ddee2026b3b2e9c3c02dd7d137fdf959.renovacaofatura.com/

Web server:
nginx/1.8.1