home

www.garenaworld.com

None

Domain Information

The domain www.garenaworld.com registered by None was initially registered in April of 2010 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. Currently this domain has been known to host various forms of malware. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Thursday, April 15, 2010

Expires date:
Friday, April 15, 2016

Updated date:
Friday, July 26, 2013

Root domain:
garenaworld.com

Whois:
1 garenaworld.com record

Scanner detections:
Malware distribution  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
66.67%

MicroWorld eScan
Trojan.Generic.11737224
33.33%

nProtect
Trojan.Generic.11737224
33.33%

McAfee
Artemis!B7935B71BAB5
33.33%

Norman
Suspicious_Gen4.HAETL
33.33%

avast!
Win32:Dropper-gen [Drp]
33.33%

Bitdefender
Trojan.Generic.11737224
33.33%

Lavasoft Ad-Aware
Trojan.Generic.11737224
33.33%

F-Secure
Trojan.Generic.11737224
33.33%

Dr.Web
Trojan.BPlug.61
33.33%

Emsisoft Anti-Malware
Trojan.Generic.11737224
33.33%

G Data
Trojan.Generic.11737224
33.33%

IKARUS anti.virus
Trojan.SuspectCRC
33.33%

Rising Antivirus
PE:Spyware.KeyLogger!1.9F7B
33.33%

The domain www.garenaworld.com has been seen to resolve to the following 3 IP addresses.

208.91.197.104
June 2, 2016

209.99.40.222
209-99-40-222.fwd.datafoundry.com
May 20, 2016

46.252.194.46
ip-46-252-194-46.ip.secureserver.net
June 9, 2014

File downloads found at URLs served by www.garenaworld.com.

1 / 68      (Malware)
http://www.garenaworld.com/dotahotkeys.php?id=inventory_a  (inventory a+.exe)

1 / 68
http://www.garenaworld.com/getfile.php?id=ia  (inventory a+.exe)

13 / 68    (Malware)
http://www.garenaworld.com/dotahotkeys.php?id=inventory_a  (Inventory A+.exe)

13 / 68    (Malware)
http://www.garenaworld.com/Inventory A .exe  (Inventory A+.exe)

13 / 68    (Malware)
http://www.garenaworld.com/getfile.php?id=inventory_a_dota_hotkeys  (Inventory A+.exe)

The following 47 files have been seen to comunicate with www.garenaworld.com in live environments.

TCP » 209.99.40.222:80
UCBrowser.exe (by UCWeb)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.222:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.222:80
hkcmd.exe (Intel Common User Interface by Intel)

TCP » 209.99.40.222:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
online-guardian-v2.0.9.exe

TCP » 209.99.40.222:80
msn.exe

TCP » 209.99.40.222:80
apptrailers.exe

TCP » 209.99.40.222:80
y03fd24.tmp

TCP » 209.99.40.222:80
lliseconc8.exe

TCP » 209.99.40.222:80
megacubo.exe (Megacubo by www.megacubo.net)

TCP » 209.99.40.222:80
messengertime.exe

TCP » 209.99.40.222:80
ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
jingling.exe

TCP » 209.99.40.222:80
browser.exe (speed browser by Smart Applications)

 
Latest 20 of 53 files

URL:
http://www.garenaworld.com/

Google Analytics:
UA-9124489

Title:
“GarenaWorld - Garena, DotA, Warcraft III and Gaming Community Forum”

Description:
“GarenaWorld is the largest gaming community dedicated to Garena, DotA, Warcraft III and the other online games. Tools, Hacks, Guides and many more...”

Web server:
Apache (PleskLin)

Facebook:
Likes:  3,917
Shares:  24,543
Comments:  1,823

Twitter:
Shares:  105

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.