home

install-cdn.theswiftrecord.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain install-cdn.theswiftrecord.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Wednesday, February 18, 2015

Expires date:
Sunday, February 18, 2018

Updated date:
Monday, March 21, 2016

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
theswiftrecord.com

Whois:
2 theswiftrecord.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Yontoo.SwiftRecord, PUP.Yontoo.SwiftRecord, PUP.Yontoo.SwiftRecord (M)
100.00%

IKARUS anti.virus
PUA.BrowseFox
100.00%

Dr.Web
Trojan.Yontoo.1016, Trojan.Yontoo.1734
94.74%

K7 AntiVirus
Trojan
94.74%

NANO AntiVirus
Trojan.Win32.Yontoo.dnkubo
94.74%

F-Prot
W32/S-f64f6ec1
94.74%

Vba32 AntiVirus
AdWare.MSIL.Agent
94.74%

Baidu Antivirus
Adware.Win32.BrowseFox
94.74%

AVG
BrowseFox, AdPlugin
94.74%

Malwarebytes
PUP.Optional.SwiftRecord.A
89.47%

Avira AntiVirus
ADWARE/BrowseFox.Gen2
89.47%

Bkav FE
W32.HfsAdware, W32.BrowseFoxAC.Adware
89.47%

Agnitum Outpost
Riskware.Agent
89.47%

Rising Antivirus
PE:Malware.UDM!6.1D8B, PE:Adware.BrowseFox!6.1D8B
89.47%

Qihoo 360 Security
HEUR/QVM30.1.Malware.Gen
84.21%

The domain install-cdn.theswiftrecord.com has been seen to resolve to the following 18 IP addresses.

104.96.220.155
a104-96-220-155.deploy.static.akamaitechnologies.com
May 18, 2016

104.96.220.106
a104-96-220-106.deploy.static.akamaitechnologies.com
May 16, 2016

104.96.220.113
a104-96-220-113.deploy.static.akamaitechnologies.com
May 16, 2016

184.51.126.123
a184-51-126-123.deploy.static.akamaitechnologies.com
April 20, 2016

184.51.126.121
a184-51-126-121.deploy.static.akamaitechnologies.com
April 20, 2016

23.0.160.11
a23-0-160-11.deploy.static.akamaitechnologies.com
April 16, 2016

23.0.160.10
a23-0-160-10.deploy.static.akamaitechnologies.com
April 16, 2016

23.15.9.90
a23-15-9-90.deploy.static.akamaitechnologies.com
April 12, 2016

23.15.9.57
a23-15-9-57.deploy.static.akamaitechnologies.com
April 12, 2016

23.15.8.201
a23-15-8-201.deploy.static.akamaitechnologies.com
April 7, 2016

23.15.8.219
a23-15-8-219.deploy.static.akamaitechnologies.com
April 7, 2016

65.158.47.112
April 7, 2016

65.158.47.98
April 7, 2016

23.62.6.89
a23-62-6-89.deploy.static.akamaitechnologies.com
March 4, 2016

23.62.6.65
a23-62-6-65.deploy.static.akamaitechnologies.com
March 3, 2016

23.62.6.88
a23-62-6-88.deploy.static.akamaitechnologies.com
March 3, 2016

67.135.105.9
February 26, 2016

67.135.105.18
February 26, 2016

File downloads found at URLs served by install-cdn.theswiftrecord.com.

1 / 68      (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015032419&bet=3  (swiftrecordbho.dll)

12 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015031820&bet=3  (swiftrecord.dll)

14 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015041507&bet=3  (swiftrecord.dll)

33 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015050407&bet=3  (swiftrecordbho.dll)

30 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015043023&bet=3  (swiftrecord.dll)

19 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040122&bet=3  (swiftrecordbho.dll)

26 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015042609&bet=3  (swiftrecordbho.dll)

19 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040921&bet=3  (swiftrecordbho.dll)

33 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015042220&bet=3  (swiftrecordbho.dll)

17 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040911&bet=3  (swiftrecord.dll)

19 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015032218&bet=3  (swiftrecordbho.dll)

25 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040314&bet=3  (swiftrecordbho.dll)

19 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015032818&bet=3  (swiftrecordbho.dll)

19 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015031921&bet=3  (swiftrecordbho.dll)

33 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015050316&bet=3  (swiftrecordbho.dll)

1 / 68      (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015032400&bet=3  (swiftrecordbho.dll)

33 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015041406&bet=3  (swiftrecordbho.dll)

33 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015043003&bet=3  (swiftrecordbho.dll)

19 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040208&bet=3  (swiftrecordbho.dll)

29 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040521&bet=3  (swiftrecord.dll)

31 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015041907&bet=3  (swiftrecordbho.dll)

17 / 68    (Adware)
http://install-cdn.theswiftrecord.com/bed?r=2015040901&bet=3  (swiftrecord.dll)

The following 195 files have been seen to comunicate with install-cdn.theswiftrecord.com in live environments.

TCP » 104.96.220.106:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.155:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 23.15.9.57:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.155:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.123:80
plugincontainer.exe

TCP » 104.96.220.106:80
GPlayer.exe (by Exent Technologies)

TCP » 23.15.8.219:80
CBSI.AppStore.Main.exe (Download App by CBS Interactive)

TCP » 104.96.220.155:443
kometa.exe (Kometa by Kometa Authors)

TCP » 104.96.220.113:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.113:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.155:80
GPlayer.exe (by Exent Technologies)

TCP » 23.15.9.57:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.155:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.155:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.8.201:80
apptrailers.exe

TCP » 104.96.220.113:443
chromatic.exe (Chromatic by The Chromatic Authors)

TCP » 104.96.220.106:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.113:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.113:80
UpdateAdmin.exe (by DownloadAdmin)

TCP » 23.15.8.219:443
browser.exe (Browser)

 
Latest 20 of 220 files

URL:
http://install-cdn.theswiftrecord.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.