home

cdn.bandisoft.com

park

Domain Information

The domain cdn.bandisoft.com registered by park was initially registered in February of 2008 through GABIA, INC.. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GABIA, INC.

Server location:
Virginia, United States (US)

Create date:
Tuesday, February 12, 2008

Expires date:
Tuesday, February 12, 2019

Updated date:
Wednesday, November 4, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
bandisoft.com

Whois:
2 bandisoft.com records

The domain cdn.bandisoft.com has been seen to resolve to the following 22 IP addresses.

162.214.20.110
162-214-20-110.unifiedlayer.com
April 19, 2016

192.99.19.16
ns504847.ip-192-99-19.net
February 24, 2016

185.59.223.24
new-york-2.cdn77.com
February 2, 2016

185.59.223.29
new-york-20.cdn77.com
January 5, 2016

185.93.0.27
atlanta-4.cdn77.com
December 7, 2015

185.59.223.11
new-york-2.cdn77.com
December 1, 2014

37.235.109.16
chicago-4.cdn77.com
December 1, 2014

37.235.108.13
lax-2.cdn77.com
September 4, 2014

46.234.113.56
atlanta-4.cdn77.com
September 4, 2014

37.235.109.18
chicago-4.cdn77.com
July 7, 2014

199.58.184.132
atlanta-2.cdn77.com
July 7, 2014

37.235.107.18
dallas-2.cdn77.com
July 7, 2014

37.46.197.102
miami-2.cdn77.com
July 7, 2014

192.252.215.13
atlanta-1.cdn77.com
July 7, 2014

54.230.38.90
server-54-230-38-90.jfk1.r.cloudfront.net
March 14, 2014

54.230.39.13
server-54-230-39-13.jfk1.r.cloudfront.net
March 14, 2014

54.230.36.111
server-54-230-36-111.jfk1.r.cloudfront.net
March 14, 2014

54.230.36.106
server-54-230-36-106.jfk1.r.cloudfront.net
March 14, 2014

54.230.36.104
server-54-230-36-104.jfk1.r.cloudfront.net
March 14, 2014

54.230.36.60
server-54-230-36-60.jfk1.r.cloudfront.net
March 14, 2014

54.230.39.73
server-54-230-39-73.jfk1.r.cloudfront.net
March 14, 2014

54.230.39.209
server-54-230-39-209.jfk1.r.cloudfront.net
March 14, 2014

File downloads found at URLs served by cdn.bandisoft.com.

1 / 68      (Malware)
http://cdn.bandisoft.com/.../bandicut-setup.exe  (48467babd124cf0242c728c77d74f0b4)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (101ba701bb23ae6b0baf052ecf8e0348)

1 / 68
http://cdn.bandisoft.com/.../bandizip-setup-gl.exe  (887cd3265e0926c4291dbb46f24ccad8)

0 / 68
http://cdn.bandisoft.com/.../BANDIZIP-SETUP.EXE  (02c74d1e167008f7435f1c361c6c3f27)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (335a74171c2af06ab668412c1e9a5def)

0 / 68
http://cdn.bandisoft.com/.../shutdown8-setup.exe  (35718b00931007f690b0cb9a4b6178f8)

0 / 68
http://cdn.bandisoft.com/.../HONEYCAM-SETUP.EXE  (952ac876e928e6b2b66018155707db7d)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (11122e6491d11f22d8cad50b1c743417)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (csh6gq3d.exe)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (747186fd2d2b4dbc231c875a304543a1)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (72df1233cb2798f8ccb975d9f3530ad8)

0 / 68
http://cdn.bandisoft.com/.../HONEYVIEW-SETUP.EXE  (hv-setup__.exe)

0 / 68
http://cdn.bandisoft.com/.../bandicut-setup.exe  (0d154d9b21c0e4d5a23c1b6b833788f4)

0 / 68
http://cdn.bandisoft.com/.../BANDIZIP-SETUP.EXE  (bandizip-5.01.exe)

0 / 68
http://cdn.bandisoft.com/.../SHUTDOWN8-SETUP.EXE  (fe6e930db104062c6ec98617a5e18490)

0 / 68
http://cdn.bandisoft.com/.../shutdown8-setup.exe  (7df74165d3a09528955576d5cc12c791)

0 / 68
http://cdn.bandisoft.com/.../BANDIZIP-SETUP.EXE  (0792526e7a86176cbbdf89e7b1eb0e64)

0 / 68
http://cdn.bandisoft.com/.../SHUTDOWN8-SETUP.EXE  (ed2f7a2d3188de4b03af5562885e296c)

1 / 68
http://cdn.bandisoft.com/.../bandizip-setup-gl.exe  (e4a012e74662c46f310708839b55e09d)

0 / 68
http://cdn.bandisoft.com/.../shutdown8-setup.exe  (e5e4f1c49d816151ca849b5348b91149)

The following 18 files have been seen to comunicate with cdn.bandisoft.com in live environments.

TCP » 185.59.223.24:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.11:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.24:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 185.59.223.24:443
mustang.exe (Mustang Browser by Rafotech)

TCP » 185.59.223.24:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.24:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.29:443
vosteran.exe

TCP » 185.59.223.29:443
crossbrowse.exe (Crossbrowse)

TCP » 185.59.223.24:443
online-guardian-v2.0.9.exe

TCP » 185.59.223.29:443
client.exe

TCP » 185.59.223.29:443
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 185.59.223.29:443
crossbrowse.exe (Crossbrowse)

TCP » 185.59.223.11:80
Microsoft_Security_Essentials_Setup.exe (Microsoft Security Essentials by Download Assistant)

TCP » 185.59.223.24:80
browser.exe (Browser)

TCP » 185.59.223.24:443
online-guardian-v2.0.9.exe

TCP » 185.59.223.29:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 37.235.109.18:80
adobeflashplayeractivexupdatesetup.exe (Adobe Flash Player ActiveX by Download Assistant)

TCP » 54.230.39.13:80
nss86ec.tmp

TCP » 54.230.39.73:80
StormAlertsApp.exe (StormAlertsApp)

TCP » 54.230.39.73:80
client.exe

 
Latest 20 of 30 files

URL:
http://cdn.bandisoft.com/

Network:
Amazon Cloudfront

SSL certificate subject:
CN=ssl.bandisoft.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.