home

cdn2.backupgrid.net

DOTCOMINTERNETMARKETING

Domain Information

The domain cdn2.backupgrid.net registered by DOTCOMINTERNETMARKETING was initially registered in September of 2011 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
England, United Kingdom (GB)

Create date:
Tuesday, September 27, 2011

Expires date:
Tuesday, September 27, 2016

Updated date:
Thursday, December 10, 2015

ASN:
AS17025 ABOVENET-CUSTOMER - Abovenet Communications, Inc,US

Root domain:
backupgrid.net

Whois:
1 backupgrid.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.JDIBACKUPLIMITED.J, PUP.Optional.Bundle.Installer.Meta (L), PUP.Optional.PCBackupSoftwareLimited.H
100.00%

AVG
Generic
20.00%

herdProtect (fuzzy)
a variant of 6036b6c758de964bb56973e1c63e737ae7b34173
20.00%

Dr.Web
Threat.Undefined
20.00%

Kaspersky
Trojan-FakeAV.Win32.Agent
20.00%

Qihoo 360 Security
Win32/Trojan.5f3
20.00%

The domain cdn2.backupgrid.net has been seen to resolve to the following IP address.

94.31.29.237
94.31.29.237.IPYX-077437-ZYO.above.net
January 4, 2016

File downloads found at URLs served by cdn2.backupgrid.net.

1 / 68      (PUP)
http://cdn2.backupgrid.net/aff_setup.exe  (f9970fb733cd39910571596fbde55d22)

6 / 68      (PUP)
http://cdn2.backupgrid.net/aff_setup.exe  (aird8b9.exe)

1 / 68      (PUP)
http://cdn2.backupgrid.net/aff_setup.exe  (3d2810bd999225ac121040ba80d24494)

1 / 68      (PUP)
http://cdn2.backupgrid.net/aff_setup.exe  (cbaf35316e3e316ae3f6c733769ce50c)

1 / 68      (PUP)
http://cdn2.backupgrid.net/aff_setup.exe  (air2d68.exe)

The following 2 files have been seen to comunicate with cdn2.backupgrid.net in live environments.

TCP » 94.31.29.237:80
Updater.exe (Updater_mpcb by Microsoft)

TCP » 94.31.29.237:80
backupsetup.exe

URL:
http://cdn2.backupgrid.net/

SSL certificate subject:
CN=*.backupgrid.net, OU=Domain Control Validated

SSL certificate issuer:
CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Web server:
NetDNA-cache/2.2

backupcdn.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.