d2cbedfdb85efec32ac33dac39227827.renovacaofatura.com

China Capital Investment Limited

Domain Information

The domain d2cbedfdb85efec32ac33dac39227827.renovacaofatura.com registered by China Capital Investment Limited was initially registered in April of 2015 through REGISTER.COM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Antonio, Texas within the United States.
Registrar:
REGISTER.COM, INC.

Server location:
Texas, United States (US)

Create date:
Thursday, April 30, 2015

Expires date:
Sunday, April 30, 2017

Updated date:
Wednesday, April 27, 2016

ASN:
AS33070 RMH-14 - Rackspace Hosting,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Gen:Trojan.Heur.VP.cm0@aWgcY3gG
100.00%

K7 AntiVirus
Trojan
100.00%

Agnitum Outpost
Trojan.DL.Genome
100.00%

Norman
Troj_Generic_2.LAQH
100.00%

Trend Micro House Call
TROJ_GEN.R047B01E715
100.00%

avast!
Win32:Malware-gen
100.00%

Kaspersky
Trojan-Downloader.Win32.Genome
100.00%

Bitdefender
Gen:Trojan.Heur.VP.cm0@aWgcY3gG
100.00%

Lavasoft Ad-Aware
Gen:Trojan.Heur.VP.cm0@aWgcY3gG
100.00%

F-Secure
Gen:Trojan.Heur.VP.cm0@aWgcY3gG
100.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
100.00%

Emsisoft Anti-Malware
Gen:Trojan.Heur.VP.cm0@aWgcY3gG
100.00%

ESET NOD32
probably unknown NewHeur_PE
100.00%

Avira AntiVirus
TR/VB.Downloader.Gen
100.00%

G Data
Gen:Trojan.Heur.VP.cm0@aWgcY3gG
100.00%

The domain d2cbedfdb85efec32ac33dac39227827.renovacaofatura.com has been seen to resolve to the following IP address.

June 5, 2016

File downloads found at URLs served by d2cbedfdb85efec32ac33dac39227827.renovacaofatura.com.

The following 4 files have been seen to comunicate with d2cbedfdb85efec32ac33dac39227827.renovacaofatura.com in live environments.

URL:
http://d2cbedfdb85efec32ac33dac39227827.renovacaofatura.com/

Web server:
nginx/1.10.1