home

1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com

NetDNA, LLC.

Domain Information

The domain 1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com registered by NetDNA, LLC. was initially registered in February of 2011 through MARKMONITOR INC.. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
MARKMONITOR INC.

Server location:
England, United Kingdom (GB)

Create date:
Wednesday, February 2, 2011

Expires date:
Thursday, February 2, 2017

Updated date:
Thursday, June 2, 2016

ASN:
AS17025 ABOVENET-CUSTOMER - Abovenet Communications, Inc,US

Root domain:
netdna-ssl.com

Whois:
1 netdna-ssl.com record

The domain 1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com has been seen to resolve to the following IP address.

94.31.29.96
94.31.29.96.IPYX-077437-ZYO.above.net
June 4, 2016

File downloads found at URLs served by 1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com.

0 / 68
http://1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com/teamviewer.exe  (52859866f72d73f2b8dc1a6bfd4a0f43)

The following 73 files have been seen to comunicate with 1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com in live environments.

TCP » 94.31.29.96:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.29.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.29.96:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.29.96:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.29.96:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.29.96:443
online-guardian.exe

TCP » 94.31.29.96:443
browser.exe (speed browser by Fast Applications)

TCP » 94.31.29.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.29.96:80
crossbrowse.exe (Crossbrowse)

TCP » 94.31.29.96:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.29.96:443
online-guardian-v2.exe

TCP » 94.31.29.96:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 94.31.29.96:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.29.96:80
snakeclassics.exe (by GamesPub)

TCP » 94.31.29.96:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 94.31.29.96:80
apptrailers.exe

TCP » 94.31.29.96:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.29.96:80
jingling.exe

TCP » 94.31.29.96:80
bricksbreakingii.exe (by GamesPub)

TCP » 94.31.29.96:443
onlineguardian-v2.exe

 
Latest 20 of 83 files

URL:
http://1hhefm2ryylo3nvkii1p00zy-wpengine.netdna-ssl.com/

Google Analytics:
UA-837798

Title:
“Web Security | Cloud Application Control | Hybrid Web Security”

Description:
“CensorNet - complete cloud security - for anyone, anywhere, any app, any device. CensorNet helps organisations manage the rise of cloud applications in an increasingly mobile world.”

SSL certificate subject:
CN=*.netdna-ssl.com, O="NetDNA, LLC", L=Studio City, S=California, C=US

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.