home

a.roundtriptrack.info

Whois Privacy Corp.

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
TLD Registrar Solutions Ltd.

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
roundtriptrack.info

Whois:
1 roundtriptrack.info record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain a.roundtriptrack.info has been seen to resolve to the following IP address.

54.72.130.67
ns1.ibspark.com
April 12, 2016

File downloads found at URLs served by a.roundtriptrack.info.

1 / 68      (Malware)
http://a.roundtriptrack.info/hp/?q=s9YGAS2BIuuftMOQIKsa4G0GlG3Aq6SPUFLbLIiGPZG7lNYQF4sI8yXfrrDU15Knd71CN0i9QRp7Il0lcqun/Bq/iUULKzEktmXo4B5nY65qiF gnnQ5zzYCF ZxLNW 7qpm57/x5ewKOSGnnWrKm LACh5QUA2XQ0okDq81U1J6jSzgtxXV2 cTbWInEjH7/tPgw iqvvSWOUqNcMFtbD2gIex1fphchuSPX5WPRWmsP5L7IWzjCOTdzDYsOSFfu9MnqYuq9NIb4iCvg EVDq8a1ejjnDJZtyY7G2LVStN17dm2Ad3amX8aoo5e8lMpRiRJ2d4dszfbsHEIy85bXd2A L6XaINVvekqgPYk/.../8NOwgzlPzLqCzZzePQyx2tpH1UkiWVJKGmHucPUMevjBRbTzhTFwl00E0WjXkI2Dh0ZOWyLtnp11Vg&external_id=1435621386377992519  (guide pratique des vrd et amnagements extrieurs.rar.exe)

1 / 68      (Malware)
http://a.roundtriptrack.info/hp/?q=rgeUOPQGUv0WWYSUMOHpKt4PqiwSk9HtePl3tWAiqgCzGUqlfTv2EkBVIjm5wR2wvviWrCa35kdUBtB/9 T1ADe29XFFKEo8kvfb9e49 jC9/0NA 5vbZo0G3NqPsEWnIsYzJwLbwoi1Qb1RG8LMgRSPSZnNB7lnoGO8cJ1CV7MrGkoE2H2qReh1Hd26Y3IbejWlolTHYmuLT4wRlYnHHDNVXnudrqtJhwIWMcgTmcsEw9Iv7Ny57eSt50bsLiAZqYpSh5d7lw9Iv6ZQUe8xgPXJKIXGSfiZjyTQBWVg 9Rw0v8Ez9dV8u62ffcckvL1lBCkJJzSuJ oQ3xptsWlwt127x5RJ3cnHu0PLI1sTSl9RNjv7s3P4iB fl6CO1ROKfzH5tw8MwGP6FYkX415q4t/dSuhiqRoCZOUGle1jEn8mbdktMVqKRO7hWErYoN3 ynBH9zhT30ZKgOsHFbF4dlB4 KiRlVrIFDICYi1F8gmPaNTNEOKxG4 Xy6VutkTqoH4OlU2c4GxiAW0ESEEmDob5V XMZRV0UrSuP6mduK TybYjUmtwVnL7s7gaz06gub4SfnA0zSOGRiSgkq0SCRiQ07VTB8fSA9ED4ZxqAOgtPF86tsKZ8 oVp1JehrNbp63Rxfj//VrKMdWz70Ck2UH0OgEIkUqL&external_id=1435622037931520576  (camfrog video chat pro 6.11.480 plus activation code.exe)

The following 142 files have been seen to comunicate with a.roundtriptrack.info in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.130.67:80
browserserver.exe

TCP » 54.72.130.67:80
sm.exe (System Monitor)

TCP » 54.72.130.67:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80
uninstall129231.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
sfupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 54.72.130.67:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 54.72.130.67:80
pepperzip.exe

TCP » 54.72.130.67:80
internetenhancer.exe (Internet Enhancer)

TCP » 54.72.130.67:80
ssn.exe (ssn)

TCP » 54.72.130.67:443
mintcast_updater_service.exe (AutomaticUpdater)

TCP » 54.72.130.67:80
yacqq.exe

 
Latest 20 of 154 files

URL:
http://a.roundtriptrack.info/

Title:
“roundtriptrack.info”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.