home

padraocolor.sytes.net

No-IP.com

Domain Information

The domain padraocolor.sytes.net registered by No-IP.com was initially registered in April of 1999 through TLDS, LLC DBA SRSPLUS. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
TLDS, LLC DBA SRSPLUS

Server location:
Virginia, United States (US)

Create date:
Thursday, April 22, 1999

Expires date:
Thursday, April 22, 2021

Updated date:
Tuesday, March 1, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Root domain:
sytes.net

Whois:
2 sytes.net records

The domain padraocolor.sytes.net has been seen to resolve to the following 2 IP addresses.

52.204.110.189
ec2-52-204-110-189.compute-1.amazonaws.com
June 23, 2016

8.23.224.90
January 26, 2016

File downloads found at URLs served by padraocolor.sytes.net.

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (2a27e5361fa18a2c6842ebfa21508708)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (9d7d86fd73e5924ea256889bff94da18)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (863f24e78e2b7b14d341435b5bc54caa)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (e2c139be2221b149151e1bb5ec1742fe)

0 / 68
http://padraocolor.sytes.net/.../Setup2-0.exe  (b5c6d01cbac85af7082f6554c20cdfb4)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (df126eae1dcbec79ede3a8693f6cae38)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (b44a85c216af3fd4324b0689ec6a3847)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (cc88ee116cbe13325100dd479f6c6bc5)

2 / 68      (inconclusive)
http://padraocolor.sytes.net/.../setup.exe  (36517afe49d72d52db50194505f7c963)

0 / 68
http://padraocolor.sytes.net/.../setup.exe  (8b745ddeec065ea687a930e328344c83)

3 / 68      (Malware)
http://padraocolor.sytes.net/.../Setup2-0.exe  (922284d445f66f9315a6687ee296ec0a)

1 / 68      (inconclusive)
http://padraocolor.sytes.net/.../setup.exe  (c6e7d4542747a435a554856389ff7219)

The following 2 files have been seen to comunicate with padraocolor.sytes.net in live environments.

TCP » 52.204.110.189:9033
xenorc7cracker.exe

TCP » 52.204.110.189:80
UCBrowser.exe (by UCWeb)

URL:
http://padraocolor.sytes.net/

Google Analytics:
UA-51754656

Title:
“Padrão Color | Início”

Description:
“Com 10 anos de experiência e mais de 20.000 revendedores no Brasil. Se você é um Revendedor Gráfico ou Designer? Esta oportunidade vai aumentar seu lucro com qualidade!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.12

padraocolor.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.