b4-31d2.kxcdn.com

proinity GmbH

Domain Information

The domain b4-31d2.kxcdn.com registered by proinity GmbH was initially registered in January of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Providence, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Utah, United States (US)

Create date:
Wednesday, January 30, 2013

Expires date:
Monday, January 30, 2017

Updated date:
Wednesday, November 19, 2014

ASN:
AS32780 HOSTINGSERVICES-INC - Hosting Services, Inc., US

Root domain:

Scanner detections:
Detections  (78% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Amonetize.OpenSour.Installer.Meta (M), Threat.Win.Reputation.IMP, Adware.Amonetize (M)
57.14%

ESET NOD32
Win32/BitCoinMiner.BY potentially unsafe application
42.86%

McAfee
Program.Artemis!F2660856ABE2, Trojan.Artemis!0C64EE5ADAB2, Trojan.Artemis!7405414AEFC7
42.86%

Dr.Web
Detection.Undefined
42.86%

Norman
Gen:Variant.Application.BitcoinMiner.16, Zum.BitCoinMiner.1
28.57%

Emsisoft Anti-Malware
Gen:Variant.Application.BitcoinMiner.16
14.29%

Kaspersky
not-a-virus:RiskTool.Win32.BitCoinMiner
14.29%

The domain b4-31d2.kxcdn.com has been seen to resolve to the following 2 IP addresses.

hosted-by.Eqserver.com
July 3, 2016

usny01.proinity.net
June 4, 2016

File downloads found at URLs served by b4-31d2.kxcdn.com.

1 / 68      (PUP)
http://b4-31d2.kxcdn.com/B4.exe  (6160eefdfc1cd14e1234e88887791c6a)

0 / 68
http://b4-31d2.kxcdn.com/B4.exe  (ic-0.88c69e2cc78e7.exe)

3 / 68      (Malware)

4 / 68      (Malware)

1 / 68      (Malware)
http://b4-31d2.kxcdn.com/B4.exe  (0d8b59278a517f2698e3e13f64a5e5d2)

0 / 68
http://b4-31d2.kxcdn.com/B4.exe  (8bfe5c3331510989280796490806c70b)

6 / 68      (PUP)
http://b4-31d2.kxcdn.com/B4.exe  (ic-0.e877a613d48d.exe)

1 / 68      (PUP)
http://b4-31d2.kxcdn.com/B4.exe  (ic-0.60852a874cf8cc.exe)

1 / 68      (PUP)

The following 9 files have been seen to comunicate with b4-31d2.kxcdn.com in live environments.

URL:
http://b4-31d2.kxcdn.com/

SSL certificate subject:
CN=*.kxcdn.com, OU=PositiveSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
keycdn-engine