home

714034182.r.cdn77.net

DataCamp Limited

Domain Information

The domain 714034182.r.cdn77.net registered by DataCamp Limited was initially registered in February of 2012 through TUCOWS DOMAINS INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the Colo at 55, LLC network.
Registrar:
TUCOWS DOMAINS INC.

Server location:
Georgia, United States (US)

Create date:
Tuesday, February 21, 2012

Expires date:
Monday, February 21, 2022

Updated date:
Tuesday, October 22, 2013

ASN:
AS46562 COLO-AT-55-LLC - Colo at 55, LLC

Root domain:
cdn77.net

Whois:
1 cdn77.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Somoto
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

F-Prot
W32/SomotoBetterInstaller.A
100.00%

Comodo Security
Application.Win32.Somoto.A
100.00%

ESET NOD32
Win32/Somoto
100.00%

AVG
AdInstaller.Somoto
100.00%

Reason Heuristics
PUP.BetterInstaller.Somoto.DD, PUP.BetterInstaller.Somoto.AA, PUP.BetterInstaller.Somoto.W, PUP.BetterInstaller.Somoto.R
100.00%

Bkav FE
W32.Clod9ad.Trojan, W32.Clodf3e.Trojan, W32.Clod424.Trojan, W32.Clode1c.Trojan, W32.Clod47b.Trojan
83.33%

Trend Micro House Call
TROJ_GEN.R0C1H07KQ13, TROJ_GEN.R0CBH0AJL13, TROJ_GEN.R0CBH07KH13, ADW_TOMOS, TROJ_GEN.F47V1018
83.33%

avast!
Win32:Somoto-F [PUP]
83.33%

Clam AntiVirus
Adware.Somoto-1, Win.Adware.Somoto
83.33%

SUPERAntiSpyware
Adware.Somoto/Variant
83.33%

Sophos
Somoto BetterInstaller
83.33%

Dr.Web
Adware.Somoto.17, Adware.Downware.1184
83.33%

VIPRE Antivirus
BetterInstaller
83.33%

The domain 714034182.r.cdn77.net has been seen to resolve to the following 6 IP addresses.

46.234.113.54
atlanta-4.cdn77.com
September 3, 2014

37.235.109.19
chicago-4.cdn77.com
September 3, 2014

199.58.184.131
atlanta-2.cdn77.com
April 11, 2014

192.252.215.14
atlanta-2.cdn77.com
February 7, 2014

192.111.140.147
dallas-2.cdn77.com
February 6, 2014

184.170.250.216
chicago-2.cdn77.com
February 6, 2014

File downloads found at URLs served by 714034182.r.cdn77.net.

24 / 68    (Adware)
http://714034182.r.cdn77.net/installers/a/d/.../FLVPlayerSetup-aAemttQ.exe  (flvplayersetup-4ukstr8.exe)

9 / 68      (Adware)
http://714034182.r.cdn77.net/installers/2/f/.../OnlineWeatherSetup-5pCy8M3.exe  (OnlineWeatherSetup-0S45vpx.exe)

18 / 68    (Adware)
http://714034182.r.cdn77.net/installers/9/b/.../FLVPlayerSetup-bM6Cksh.exe  (89d96821c03ce2b507b7239a8fc3a01a)

21 / 68    (Adware)
http://714034182.r.cdn77.net/installers/c/1/.../7ZipSetup-a3kmKzD.exe  (7ZipSetup-esUFlMA.exe)

20 / 68    (Adware)
http://714034182.r.cdn77.net/installers/0/3/.../FreeMahjongGamesSetup-64IeAQi.exe  (FreeMahjongGamesSetup-3jOmtHN.exe)

19 / 68    (Adware)
http://714034182.r.cdn77.net/installers/3/7/.../FLVPlayerSetup-2VmjmAK.exe  (FLVPlayerSetup-awAuQ5B.exe)

The following 3 files have been seen to comunicate with 714034182.r.cdn77.net in live environments.

TCP » 46.234.113.54:80
adobe flash player setup.exe (Adobe Flash Player by Download Publisher)

TCP » 46.234.113.54:80
setup.exe (DVD Shrink by Download Publisher)

TCP » 46.234.113.54:80
Setup.exe (Java Runtime by Download Manager)

URL:
http://714034182.r.cdn77.net/

Web server:
nginx

Compete.com:
US visitors:  14,411

Statistics are for the previous month.

worldssl.net

thehunter.com

gameclient.eu

icons8.com

network-inventory-advisor.com

programs.directory

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.