a96e2aee4e8f3dfd1cb0686d484ab280.renovacaofatura.com

China Capital Investment Limited

Domain Information

The domain a96e2aee4e8f3dfd1cb0686d484ab280.renovacaofatura.com registered by China Capital Investment Limited was initially registered in April of 2015 through REGISTER.COM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Antonio, Texas within the United States.
Registrar:
REGISTER.COM, INC.

Server location:
Texas, United States (US)

Create date:
Thursday, April 30, 2015

Expires date:
Saturday, April 30, 2016

Updated date:
Monday, November 2, 2015

ASN:
AS33070 RMH-14 - Rackspace Hosting,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Gen:Variant.VBKrypt.12
100.00%

McAfee
Artemis!3C73FDED5412
100.00%

Kaspersky
Trojan-Downloader.Win32.Genome
100.00%

Bitdefender
Gen:Variant.VBKrypt.12
100.00%

Lavasoft Ad-Aware
Gen:Variant.VBKrypt.12
100.00%

Sophos
Troj/VB-IPQ
100.00%

F-Secure
Gen:Variant.VBKrypt.12
100.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
100.00%

Emsisoft Anti-Malware
Gen:Variant.VBKrypt.12
100.00%

Avira AntiVirus
TR/VB.Downloader.Gen
100.00%

G Data
Gen:Variant.VBKrypt.12
100.00%

Baidu Antivirus
Adware.Win32.Genome
100.00%

ESET NOD32
probably unknown NewHeur_PE
100.00%

Fortinet FortiGate
W32/VB.ZIL!tr.dldr
100.00%

Panda Antivirus
Trj/CI.A
100.00%

The domain a96e2aee4e8f3dfd1cb0686d484ab280.renovacaofatura.com has been seen to resolve to the following IP address.

April 22, 2016

File downloads found at URLs served by a96e2aee4e8f3dfd1cb0686d484ab280.renovacaofatura.com.

The following 4 files have been seen to comunicate with a96e2aee4e8f3dfd1cb0686d484ab280.renovacaofatura.com in live environments.

URL:
http://a96e2aee4e8f3dfd1cb0686d484ab280.renovacaofatura.com/

Web server:
nginx/1.8.1