home

a.compcollection.info

Irek Sharapov

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
Wild West Domains, LLC (R213-LRMS)

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:
compcollection.info

Whois:
1 compcollection.info record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.PCUtilities.Task.Meta (M), Threat.Win.Reputation.IMP
100.00%

The domain a.compcollection.info has been seen to resolve to the following 4 IP addresses.

50.63.202.93
ip-50-63-202-93.ip.secureserver.net
June 24, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
July 2, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
July 2, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
July 2, 2015

File downloads found at URLs served by a.compcollection.info.

1 / 68      (Malware)
http://a.compcollection.info/hp/?q=f65VPIwqMg8nQurpnicUZNG3f5nsC8z6UBHcP/SVyA9iwm4w8MQj/.../Y0GgxucaBzRmGfkkGIfBrie3v  (13805.exe)

1 / 68      (Malware)
http://a.compcollection.info/hp/?q=hqfMQLm2IlMoQDWYSULMo7RlewpVvFDjqMeq7pG2pAMeaxae8qjncwqpuia8pO0QXgBgV DDAtDsfSQ/1jWz uRxVt0mNd/Gm/.../crlpwJi  (download.exe)

1 / 68      (PUP)
http://a.compcollection.info/hp/?q=GYr3H5eXpzHTKdefABTXKziAuCOWhh7p59RISUwmMu3 f89iDPM/1K6KEcu5kWNADRUmmK4 8ZR2admvn4VHBGBcxNyqYVvtDFCmSa4uTZTEtsLCPraYBHr yxM9g ILJRE477lWVGWPbxFNzoai4DRueju93VOfln/p9AS8sSQb8fGPnt5Exb4PQqAZ1MdUCnOEPBrfATEywpeNFUlo/XKlpChAsG8cW2KdEyEWmX9dvwrKS4oBfKfKCVwn0D/ILsG8 svssfEU6Xp/.../RH8g6JF37QRrbwUKH6zKpaJ1nxqBNZC092Z192li 8Gqd4RxTUHHb  (download.exe)

The following 2 files have been seen to comunicate with a.compcollection.info in live environments.

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

URL:
http://a.compcollection.info/

Web server:
openresty

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.