home

promo.bongacash.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain promo.bongacash.com is registered by proxy through ENOM, INC. and was originally registered in June of 2012. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Monday, June 18, 2012

Expires date:
Thursday, June 18, 2020

Updated date:
Saturday, December 19, 2015

ASN:
AS60781 LEASEWEB-NL LeaseWeb Netherlands B.V., NL

Root domain:
bongacash.com

Whois:
1 bongacash.com record

The domain promo.bongacash.com has been seen to resolve to the following 12 IP addresses.

37.48.74.66
hosted-by.leaseweb.com
August 24, 2016

5.79.64.41
August 24, 2016

5.79.64.40
August 24, 2016

5.79.64.39
August 24, 2016

37.48.81.19
hosted-by.leaseweb.com
August 24, 2016

37.48.74.69
hosted-by.leaseweb.com
April 13, 2016

37.48.74.68
hosted-by.leaseweb.com
April 13, 2016

37.48.74.65
hosted-by.leaseweb.com
April 13, 2016

5.79.64.44
April 13, 2016

5.79.64.38
April 13, 2016

95.211.214.91
April 13, 2016

37.48.81.18
hosted-by.leaseweb.com
April 13, 2016

File downloads found at URLs served by promo.bongacash.com.

0 / 68
http://promo.bongacash.com/stream_-FuckGirlss-.webm  (ee6bdab5b34c63e03b492b0f738a70cf)

2 / 68      (false positives)
http://promo.bongacash.com/stream_ahotlovee.webm  (wrar420.exe)

The following 8 files have been seen to comunicate with promo.bongacash.com in live environments.

TCP » 37.48.74.69:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.68:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.65:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.65:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.66:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.66:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.68:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.69:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 37.48.74.66:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.68:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 37.48.74.69:80
browser.exe (Speed Browser by Smart Applications)

TCP » 37.48.74.68:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.69:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.66:80
browser.exe (speed browser by Smart Applications)

TCP » 37.48.81.18:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 37.48.74.65:80
browser.exe (Speed Browser by Smart Applications)

TCP » 37.48.81.18:443
online-guardian-v2.0.9.exe

URL:
http://promo.bongacash.com/

Web server:
nginx/1.6.2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.