» brasilinforeceita.com
Overview
Analysis
IPs Addresses (1)
Downloads (6)
Network (14)
Website Detail
Related Domains (35)

brasilinforeceita.com

Repossessed by Go Daddy

Domain Information

The domain brasilinforeceita.com registered by Repossessed by Go Daddy was initially registered in August of 2015 through GODADDY.COM, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Repossessed by Go Daddy

Registrar:

GODADDY.COM, LLC

Server location:

Arizona, United States (US)

Create date:

Tuesday, August 11, 2015

Expires date:

Thursday, August 11, 2016

Updated date:

Saturday, October 3, 2015

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Whois:

1 brasilinforeceita.com record

Scanner detections:

Malware distribution (83% detected)

Scan engine

Details

Detections

Kaspersky

Backdoor.Java.Agent, Trojan-Ransom.Win32.Blocker

100.00%

Panda Antivirus

Generic Suspicious, Trj/CI.A

83.33%

McAfee

RDN/Generic BackDoor, Artemis!4842B4415C00, Artemis!7F12390325CF

66.67%

Baidu Antivirus

Backdoor.Java.Agent

50.00%

Zillya! Antivirus

Backdoor.Agent.Win32.55949

50.00%

Trend Micro

TROJ_GEN.R047C0OHN15, TROJ_GEN.R08NC0OHK15, TROJ_GEN.R047C0DII15

50.00%

Fortinet FortiGate

Java/Agent.G!tr.bdr

50.00%

Avira AntiVirus

DR/Mkar.E.3, TR/Dldr.Agent.16896.88

33.33%

VIPRE Antivirus

Trojan.Win32.Generic

33.33%

G Data

Win32.Trojan.Agent.KXUY4X, Trojan.GenericKD.2669672

33.33%

K7 AntiVirus

Riskware

16.67%

Sophos

Mal/Generic-S

16.67%

Qihoo 360 Security

HEUR/QVM41.2.Malware.Gen

16.67%

Rising Antivirus

PE:Trojan.Win32.Generic.18F2D4B5!418567349

16.67%

MicroWorld eScan

Trojan.GenericKD.2669672

16.67%

The domain brasilinforeceita.com has been seen to resolve to the following IP address.

184.168.221.37

ip-184-168-221-37.ip.secureserver.net

February 23, 2016

File downloads found at URLs served by brasilinforeceita.com.

10 / 68 (Malware)

http://brasilinforeceita.com/ (receitanet-10.18.exe)

17 / 68 (Malware)

http://brasilinforeceita.com/ (receita_0.0.1.exe)

9 / 68 (Malware)

http://brasilinforeceita.com/ (receitanet-10.16.exe)

2 / 68 (inconclusive)

http://brasilinforeceita.com/ (receitanet-10.21.exe)

6 / 68 (Malware)

http://brasilinforeceita.com/ (receitanet-10.12.exe)

4 / 68 (Malware)

http://brasilinforeceita.com/ (receitanet-10.17.exe)

The following 14 files have been seen to comunicate with brasilinforeceita.com in live environments.

TCP » 184.168.221.37:80

produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 184.168.221.37:80

jingling.exe

TCP » 184.168.221.37:80

ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 184.168.221.37:80

powerdvdplayer.exe

TCP » 184.168.221.37:80

ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 184.168.221.37:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.37:25

www.exe

TCP » 184.168.221.37:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.37:80

mp4player.exe

TCP » 184.168.221.37:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.37:80

ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 184.168.221.37:80

mp4player.exe

TCP » 184.168.221.37:587

www.exe

TCP » 184.168.221.37:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 184.168.221.37:8080

server.exe

URL:

http://brasilinforeceita.com/

Title:

“Site Unavailable”

Web server:

Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

Related Domains

30 of 35 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.