home

dl.cdn.baixaki.com.br

Financeiro GrupoNZN

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
baixaki.com.br

Whois:
2 baixaki.com.br records

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore.NOZEBRANETWORKA (M), PUP.InstallCore.ENG (M), PUP.installCore.ISBRInst (M), PUP.installCore.NOZEBRAN (M), PUP.installCore (M)
89.80%

VIPRE Antivirus
InstallCore.b
36.73%

ESET NOD32
Win32/InstallCore.CH (variant), Win32/InstallCore (variant), Win32/InstallCore.CA.gen (variant), Win32/InstallCore.BL, Win32/InstallCore.BY (variant)
36.73%

Trend Micro House Call
TROJ_GEN.F47V0901, TROJ_GEN.F47V0809, TROJ_GEN.F47V0803, TROJ_GEN.R0CBH01FR13, TROJ_GEN.F47V0831, TROJ_GEN.F47V0830, TROJ_GEN.R047H0AI713, TROJ_GEN.F47V0709, TROJ_GEN.R0CBH01FK13
34.69%

Dr.Web
Trojan.Packed.24524, Adware.InstallCore.122, Adware.InstallCore.107, Adware.InstallCore.122
30.61%

McAfee
Artemis!0BCAE9C4A670, Artemis!FFD729575681, Artemis!418101DFC2FF, Artemis!2CF50BD67403, Artemis!A4B7A8B56EA4, Artemis!8B2948DEE8B4, Artemis!4DBEB57AF5BE, Artemis!79D10A6F2A45, Artemis!2FFD0F7A5441, Artemis!6293D1F48789, Artemis!86D549DC236F
22.45%

Malwarebytes
PUP.Optional.InstallCore, PUP.Optional.InstallCore.A
22.45%

Avira AntiVirus
ADWARE/InstallCore.Gen7, Adware/Installco.AB, APPL/InstallCore.14
22.45%

Comodo Security
UnclassifiedMalware, ApplicUnwnt, Application.Win32.Agent.J
20.41%

F-Prot
W32/InstallCore.R3.gen, W32/InstallCore.R.gen, W32/InstallCore.R2.gen, W32/InstallCore.R4.gen
18.37%

Microsoft Security Essentials
SoftwareBundler:Win32/DealPly
14.29%

ESET NOD32
Win32/InstallCore.BV potentially unwanted application, Win32/InstallCore.BY potentially unwanted application
12.24%

Fortinet FortiGate
Riskware/InstallCore_CA, W32/InstallCore.BL
10.20%

Bkav FE
W32.Clodffc.Trojan, W32.Clodc72.Trojan, HW32.Laneul
6.12%

K7 AntiVirus
Trojan
6.12%

The domain dl.cdn.baixaki.com.br has been seen to resolve to the following 53 IP addresses.

169.45.117.93
5d.75.2da9.ip4.static.sl-reverse.com
May 17, 2016

107.154.113.89
107.154.113.89.ip.incapdns.net
May 15, 2016

107.154.112.89
107.154.112.89.ip.incapdns.net
May 15, 2016

184.28.17.226
a184-28-17-226.deploy.static.akamaitechnologies.com
April 16, 2016

65.158.47.32
April 10, 2016

65.158.47.48
April 1, 2016

65.158.47.27
April 1, 2016

23.15.7.163
a23-15-7-163.deploy.static.akamaitechnologies.com
March 8, 2016

23.15.9.163
a23-15-9-163.deploy.static.akamaitechnologies.com
March 4, 2016

198.47.116.68
March 3, 2016

198.47.116.33
March 3, 2016

184.51.126.83
a184-51-126-83.deploy.static.akamaitechnologies.com
February 23, 2016

184.51.126.82
a184-51-126-82.deploy.static.akamaitechnologies.com
February 23, 2016

184.51.126.42
a184-51-126-42.deploy.static.akamaitechnologies.com
February 10, 2016

168.143.242.234
January 27, 2016

168.143.242.224
January 27, 2016

23.62.7.19
a23-62-7-19.deploy.static.akamaitechnologies.com
September 17, 2015

23.62.7.65
a23-62-7-65.deploy.static.akamaitechnologies.com
September 17, 2015

184.28.17.210
a184-28-17-210.deploy.static.akamaitechnologies.com
August 11, 2015

184.28.17.160
a184-28-17-160.deploy.static.akamaitechnologies.com
August 11, 2015

184.29.106.59
a184-29-106-59.deploy.static.akamaitechnologies.com
June 26, 2015

184.29.106.48
a184-29-106-48.deploy.static.akamaitechnologies.com
June 26, 2015

72.247.9.114
a72-247-9-114.deploy.akamaitechnologies.com
May 4, 2015

23.67.250.120
a23-67-250-120.deploy.static.akamaitechnologies.com
May 3, 2015

23.67.250.88
a23-67-250-88.deploy.static.akamaitechnologies.com
May 3, 2015

184.25.157.91
a184-25-157-91.deploy.static.akamaitechnologies.com
April 28, 2015

184.25.157.83
a184-25-157-83.deploy.static.akamaitechnologies.com
April 28, 2015

184.51.126.51
a184-51-126-51.deploy.static.akamaitechnologies.com
April 13, 2015

184.51.126.59
a184-51-126-59.deploy.static.akamaitechnologies.com
April 13, 2015

72.247.9.160
a72-247-9-160.deploy.akamaitechnologies.com
April 13, 2015

 
Showing 30 of 53 IP Addresses

File downloads found at URLs served by dl.cdn.baixaki.com.br.

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/50150/.../photo--3d-screensaver-11-32-bits.exe  (b75032e9e5135e67c467d0d164a76c6a)

5 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/.../faststone-photo-resizer-31-baixaki-32-bits.exe  (20dacfe32c62c7d553cafcd8a9579831)

0 / 68
http://dl.cdn.baixaki.com.br/programas/65987/.../edrawings-viewer-2010-32-bits.exe  (4f7db670e980ad433d9aa7c64e8741a9)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/45978/.../superdvd-video-editor-19-32-bits.exe  (8395a12cc5d9940db72313af55ed50d3)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/30826/.../microsoft-photo-story-30-32-bits.exe  (ef1c20cdd3ee23fc0a5ba6bbf69dcc0b)

11 / 68    (PUP)
http://dl.cdn.baixaki.com.br/programas/78663/.../jetclean-150125-32-bits.exe  (86d549dc236f5fc8c2ebdc4f63a32032)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/69575/.../microsoft-mathematics-add-in--32-bits.exe  (f023831d36081377439acada66ab6dfb)

8 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/66656/.../4shared-desktop-4031-32-bits.exe  (6293d1f4878989ce7faab0b3dd7ecb96)

1 / 68      (inconclusive)
http://dl.cdn.baixaki.com.br/programas/4903/.../terragen-0943-32-bits.exe  (00ad553a8c5b0f4efd2eb9a721f630f0)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/47408/.../super-mario-bros-kill-bowser--32-bits.exe  (c14c40e41c85cfbff239a63a62c36bc0)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/73699/.../super-mario-bros-paradise--32-bits.exe  (c9e5fdc94577cf2a8e925b66c69ad910)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/49263/.../super-mario-bros-dual-dash-32-bits.exe  (2ad234673f6e3a714cf7235a2abc6e1d)

6 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/10174/.../tecnobyte-sac-free-284-32-bits.exe  (dbf8831922423f1696ac3aa23a234838)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/35162/.../vegas-movie-studio-11075-32-bits.exe  (94c5ad5c71564390832cb5d329d98103)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/45291/.../teamspeak-client-3011-32-bits.exe  (42bf2b1287ac7af26a0acc2366e52eed)

1 / 68      (inconclusive)
http://dl.cdn.baixaki.com.br/programas/97216/.../any-video-to-mp3-converter-244-32-bits.exe  (f74b7db428bce03f5329a29f0a864a85)

1 / 68      (inconclusive)
http://dl.cdn.baixaki.com.br/programas/78051/.../mediahuman-youtube-to-mp3-converter-267-32-bits.exe  (50c82f476e79dd4d65eb6fb8eca9b47e)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/56927/.../multi-theft-auto-13-32-bits.exe  (88331187225f05ed7e0de76c1665b35c)

9 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/55530/.../free-dvd-iso-burner-12-32-bits.exe  (2ffd0f7a54414b30352d6326a9128af3)

6 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/68418/.../universal-usb-installer-1940-32-bits.exe  (79d10a6f2a4567209eba08fe1520f9ac)

5 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/64363/.../german-truck-simulator-132-32-bits.exe  (050e596278b056874c5c9a77ae3b8e32)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/.../atube-catcher-381462-baixaki-32-bits-1c7d8266184f839ef3b821ff4e9bb7df.exe  (aea1ae45c9b4132180a5480cd721ae49)

16 / 68    (PUP)
http://dl.cdn.baixaki.com.br/programas/46166/.../revo-uninstaller-195-32-bits.exe  (418101dfc2ff4facde88d5b998ef8287)

10 / 68    (PUP)
http://dl.cdn.baixaki.com.br/programas/45519/.../microsoft-zune-48-32-bits.exe  (mozilla-firefox-2301-32-bits.exe)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/38348/.../ares-music-331-32-bits.exe  (icreinstall_ares-music-331-32-bits.exe)

19 / 68    (PUP)
http://dl.cdn.baixaki.com.br/programas/48923/.../atube-catcher-382114-32-bits.exe  (ffd7295756810b20ce51525c2903309d)

1 / 68      (Adware)
http://dl.cdn.baixaki.com.br/programas/57249/.../windows-movie-maker-2012-1643503728-32-bits.exe  (b711f7180c47932922dbd33d18bfd8bd)

12 / 68    (PUP)
http://dl.cdn.baixaki.com.br/programas/.../skype-650158-baixaki-32-bits-c253ad452fd1fecadf00ac496192502f.exe  (2cf50bd67403d70ab8d1e760c3f3bb62)

7 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/17505/.../atomixmp3-23-32-bits.exe  (4dbeb57af5be99d09f5e2d15f4db57d8)

7 / 68      (PUP)
http://dl.cdn.baixaki.com.br/programas/70828/.../wondershare-dvd-slideshow-builder-free-602-32-bits.exe  (8acaae07c2f7ded0098289f733b26b43)

 
Latest 30 of 472 download URLs

The following 698 files have been seen to comunicate with dl.cdn.baixaki.com.br in live environments.

TCP » 107.154.113.89:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 23.15.7.152:80
browser.exe (speed browser by Smart Applications)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.147:80
browser.exe (speed browser by Smart Applications)

TCP » 23.15.7.152:80
updateadmin.exe

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 169.45.117.93:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 107.154.112.89:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 184.51.126.59:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
messengertime.exe

TCP » 169.45.117.93:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
whatsapptime.exe

TCP » 184.29.106.48:80
browser.exe (Browser)

TCP » 184.51.126.83:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 169.45.117.93:80
browser.exe (Speed Browser by Smart Applications)

TCP » 184.51.126.82:80
plugincontainer.exe

 
Latest 20 of 746 files

URL:
http://dl.cdn.baixaki.com.br/

Web server:
AkamaiGHost

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.