home

s7.7ba.org

N/A

Domain Information

The hosted servers are located in Kiev, Kyyiv within Ukraine which resides on the RIPE Network Coordination Centre network.
Registrar:
Registrar of Domain Names REG.RU LLC

Server location:
Kyyiv, Ukraine (UA)

ASN:
AS6849 UKRTELNET PJSC UKRTELECOM,UA

Root domain:
7ba.org

Whois:
1 7ba.org record

The domain s7.7ba.org has been seen to resolve to the following IP address.

212.113.35.239
212.113.35.239.dc.ukrtelecom.ua
February 16, 2016

File downloads found at URLs served by s7.7ba.org.

1 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=2d19ec054c676ef2aece5dfe1752ce98.apk&name=iptv-2-1-3&id=471196  (7baru_iptv-2-1-3_471196.apk)

0 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=5ba05d5245542270d58f4499617536f5.apk&name=vlc-media-player-for-android--beta-v-0-0-3-beta&id=495336  (7baru_vlc-media-player-for-android--beta-v-0-0-3-beta_495336.apk)

0 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=db615b845f95c9a28904edc86c8f9563.apk&name=vlc-beta-neon-version-v0-0-4&id=534809  (7baru_vlc-beta-neon-version-v0-0-4_534809.apk)

0 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=5362ce6ff4d735a3446fe111766d037f.apk&name=daroon-player-v-1-2-0&id=423632  (7baru_daroon-player-v-1-2-0_423632.apk)

0 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=afe4a4d7af6daed40983484d25470fa2.rar&name=tv-player-gold-classic-6-7&id=212488  (7baru_tv-player-gold-classic-6-7_212488.rar)

0 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=5cc03a10490930d956e7cf7f73aa8490.apk&name=glaz-tv---v-1-2&id=1329953  (7baru_glaz-tv---v-1-2_1329953.apk)

0 / 68
http://s7.7ba.org/ex/.../link.php?type=0&filename=79bdac2c786c8278b5326322a59e2474.apk&name=com-bozon-bizonn-1&id=1326586  (7baru_com-bozon-bizonn-1_1326586.apk)

The following file have been seen to comunicate with s7.7ba.org in live environments.

TCP » 212.113.35.239:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://s7.7ba.org/

Web server:
nginx/1.9.9

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.