» callfor.info
Overview
Analysis
IPs Addresses (1)
Downloads (21)
Website Detail
Related Domains (3)

callfor.info

NA

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Carrollton, Texas within the United States which resides on the WEBSITEWELCOME.COM network.

Registrant:

Registrar:

Launchpad.com Inc.

Server location:

Texas, United States (US)

ASN:

AS20013 CYRUSONE - CyrusOne LLC,US

Whois:

1 callfor.info record

Scanner detections:

Malware distribution (76% detected)

Scan engine

Details

Detections

Kaspersky

not-a-virus:RiskTool.Win64.BitCoinMiner, Trojan.Win64.BitMin, Trojan.Win64.BitMiner, Backdoor.Win32.Androm, UDS:DangerousObject.Multi.Generic, Trojan.Win32.BitMin, not-a-virus:RiskTool.Win64.Agent

70.59%

G Data

Trojan.Generic.11649192, Trojan.Generic.12018459, Win64.Trojan.Agent.2SWF9I, Gen:Variant.Mikey.21583, Win64.Riskware.BitCoinMiner

58.82%

McAfee

RDN/Generic PUP.x!cmq, Artemis!37E2490D6C93, Artemis!7BA630FEC0B0, Trojan.Artemis!AA5AED0894F2, Artemis!9315B6504384, RDN/Generic PUP.x!c2i

52.94%

AVG

BitCoinMiner.D, Skodna.BitCoinMiner, Win32/Cryptor, Generic36, JS/Heur

52.94%

MicroWorld eScan

Trojan.Generic.11649192, Trojan.Generic.12018459, Gen:Variant.Mikey.21583, Rootkit.15355, Application.Hacktool.KQ, Trojan.Generic.15115885

47.06%

K7 AntiVirus

Trojan , Unwanted-Program

47.06%

Bitdefender

Trojan.Generic.11649192, Trojan.Generic.12018459, Gen:Variant.Mikey.21583, Rootkit.15355, Application.Hacktool.KQ, Trojan.Generic.15115885

47.06%

avast!

Win64:Rootkit-gen [Rtk], Win64:Malware-gen, Win32:Trojan-gen

41.18%

Baidu Antivirus

Hacktool.Win64.BitCoinMiner, Trojan.Win64.CoinMiner, Adware.Win32.iBryte, Trojan.Script.Downloader

41.18%

ESET NOD32

Win64/BitCoinMiner (variant), Win64/BitCoinMiner.AN potentially unsafe (variant), Win32/Kryptik.DSUX (variant), Win32/Kryptik.DTRH (variant), Win64/BitCoinMiner.U potentially unsafe (variant)

41.18%

IKARUS anti.virus

not-a-virus:RiskTool.BitCoinMiner, Trojan.Win64.CoinMiner, Trojan.Win64.Nssm, Trojan.Win32.BitMin

41.18%

nProtect

Trojan.Generic.11649192, Trojan.Generic.12018459, Trojan.Generic.15115885, Trojan/W32.Agent.186880.Z

35.29%

Agnitum Outpost

Riskware.BitCoinMiner, Trojan.CoinMiner, Trojan.Agent

35.29%

Trend Micro House Call

TROJ_GEN.R047C0OHO14, TROJ_GEN.R047H05K114, TROJ_GEN.R047C0EJ514, TSPY_AGENT_CD1002E4.RDXN

35.29%

Panda Antivirus

Trj/Chgt.D, Generic Suspicious

35.29%

The domain callfor.info has been seen to resolve to the following IP address.

192.185.16.209

January 5, 2016

File downloads found at URLs served by callfor.info.

1 / 68 (Malware)

http://callfor.info/taskmgr.exe (e8c27031d82e793ce693b742dd1df34e)

17 / 68 (Malware)

http://callfor.info/taskmgr.exe (12b5cc4cbfef68704f713d8ebf8bdf78)

0 / 68

http://callfor.info/svchost.exe (alphavss.60.x64.dll)

5 / 68 (Malware)

http://callfor.info/taskmgr.exe (aa5aed0894f28637c1e65d007ea65657)

14 / 68 (PUP)

http://callfor.info/taskmgr.exe (7ba630fec0b0f4a480de87e4ab49e124)

15 / 68 (PUP)

http://callfor.info/taskmgr.exe (msviap.cmd)

1 / 68 (Malware)

http://callfor.info/svchost.exe (a43903553d9a9d58d21eabdceec9362b)

1 / 68 (Malware)

http://callfor.info/svchost.exe (ddb0de4f027ac18dcfd710de0f94797c)

0 / 68

http://callfor.info/taskmgr.exe (cmd.exe)

19 / 68 (Malware)

http://callfor.info/taskmgr.exe (d49fb104f06e392543e887252774cf72)

23 / 68 (PUP)

http://callfor.info/WindowsDefender.exe (8ac0cc33ddc9fbde7b2b67c066a0650b)

25 / 68 (Malware)

http://callfor.info/taskmgr.exe (svchost.exe)

0 / 68

http://callfor.info/SetupCasino.exe (setupcasino_90d0ab_ro.exe)

1 / 68

http://callfor.info/taskmgr.exe (3f65901af76225a2581dc8c9346b812c)

22 / 68 (PUP)

http://callfor.info/csrss.exe (3eb05cb9aade2c8948603fc422d2dd6e)

19 / 68 (PUP)

http://callfor.info/Windows Defender.exe (3467abc9acb1a1ae3f5322e2d4f7a5f8)

5 / 68 (Malware)

http://callfor.info/svchost.exe (9315b6504384b9fd4bf4d41ea4d90a58)

0 / 68

http://callfor.info/SetupCasino.exe (azart.refaz109994.v.exe)

27 / 68 (PUP)

http://callfor.info/Windows_Defender.exe (806779989c6ea355a1abf4f6c7cb646c.exe)

5 / 68 (PUP)

http://callfor.info/svchost.exe (b397efc0ce2a8def5903e0868ab97851)

5 / 68 (Malware)

http://callfor.info/svchost.exe (edef5d72ecbd546a39d430ad93a0b4dc)

URL:

http://callfor.info/

Title:

“$250-$1000 a Day trading Binary Options on Autopilot”

Description:

“$250 - $1000 a day trading binary options on autopilot.”

Web server:

nginx/1.8.1

Related Domains

bongacams24.com

goodbe.co

gooqler.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.