» lp5.bongacams24.com
Overview
Analysis
IPs Addresses (1)
Downloads (28)
Website Detail
Related Domains (3)

lp5.bongacams24.com

1&1 Internet Inc

Domain Information

The domain lp5.bongacams24.com registered by 1&1 Internet Inc was initially registered in July of 2014 through 1&1 INTERNET SE. Currently this domain has been known to host various forms of malware. The hosted servers are located in Carrollton, Texas within the United States which resides on the WEBSITEWELCOME.COM network.

Registrant:

1&1 Internet Inc

Registrar:

1&1 INTERNET SE

Server location:

Texas, United States (US)

Create date:

Monday, July 14, 2014

Expires date:

Thursday, July 14, 2016

Updated date:

Thursday, March 17, 2016

ASN:

AS20013 CYRUSONE - CyrusOne LLC,US

Root domain:

bongacams24.com

Whois:

2 bongacams24.com records

Scanner detections:

Malware distribution (75% detected)

Scan engine

Details

Detections

Reason Heuristics

Trojan.Downloader (M)

95.24%

Dr.Web

hacktool program Tool.BtcMine.476, Trojan.Siggen6.55013

42.86%

AegisLab AV Signature

DangerousObject.Multi.Gen

23.81%

avast!

Win64:Rootkit-gen [Rtk], Win64:Evo-gen [Susp]

14.29%

AVG

Skodna.BitCoinMiner, Generic36

14.29%

Malwarebytes

Trojan.Dropper.Script

14.29%

McAfee

Artemis!37E2490D6C93, Artemis!79A87F9B9AD4

9.52%

K7 AntiVirus

Trojan

9.52%

VIPRE Antivirus

Trojan.Win32.Generic

9.52%

IKARUS anti.virus

Trojan.Win64.CoinMiner, Trojan.Win32.CoinMiner

9.52%

Zillya! Antivirus

Adware.OutBrowse.Win32.80053

9.52%

Bkav FE

HW64.packed

4.76%

MicroWorld eScan

Trojan.Generic.12018459

4.76%

nProtect

Trojan.Generic.12018459

4.76%

Trend Micro House Call

TROJ_GEN.R047H05K114

4.76%

The domain lp5.bongacams24.com has been seen to resolve to the following IP address.

192.185.16.209

February 21, 2016

File downloads found at URLs served by lp5.bongacams24.com.

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (196262735037b64c36112c9e7c0483d0)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (ab3380655a1f94d9f21c0eb50ab303e9)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (d88e84f42cee839eca53676abcf4e301)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (571f88ea0551797267d174e50a5a9aa4)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (72eafdf1223ddb74198229a92562654e)

0 / 68

http://lp5.bongacams24.com/csrss.exe (bc3297e7aa01e0f0a65c307236f62d1a)

0 / 68

http://lp5.bongacams24.com/OpenCL.dll (d143c8d82d8b0ccc0b9cda536596d808)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (c9dc1b62d91e96787c286333ff2e8123)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (7fdbd2077cce0f27b24eddf7d8166e30)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (4e954ac9c712dfeeea0d58eac4a0e820)

3 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (06a799715a33de0daa1b1d773822ae5b)

3 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (1ab085832ddd83d57df92b9a1b2dd781)

1 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (b71703f6151aea33c16e999a50797c30)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (2d99a704ff1fd791e55685f99c752363)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (405a9420d174df66d741810f79ab3fb7)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (4d70f24d420a07e0e7468f82d0325a24)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (3b02a4a15687008e4ac90ba8bce7bc27)

3 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (284c32a49439f2488a2ba3abf42ee788)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (9be7686b227de44024cfdbc49de4039f)

2 / 68 (Malware)

http://lp5.bongacams24.com/taskmgr.exe (0cbb0896dcf302307e0a8c446928b109)

5 / 68 (PUP)

http://lp5.bongacams24.com/taskmgr.exe (3643575dc2ee460f2ac895b91fb00cf5)

0 / 68

http://lp5.bongacams24.com/csrss.exe (7d5c6defa7f2f139458cb2303b041853)

0 / 68

http://lp5.bongacams24.com/libcurl.dll (514df457d8a2a2f8ee6aa31e254b3a43)

0 / 68

http://lp5.bongacams24.com/libmicrohttpd-dll.dll (07bee07e0bc94731f84cc754138fa940)

0 / 68

http://lp5.bongacams24.com/msvcp120.dll (46060c35f697281bc5e7337aee3722b1)

0 / 68

http://lp5.bongacams24.com/msvcr120.dll (9c861c079dd81762b6c54e37597b7712)

25 / 68 (Malware)

http://lp5.bongacams24.com/csrss.exe (svchost.exe)

11 / 68 (PUP)

http://lp5.bongacams24.com/taskmgr.exe (79a87f9b9ad433f42b3942d3eb7c6917)

URL:

http://lp5.bongacams24.com/

Title:

“BongaCams24.com”

Web server:

nginx/1.8.1

Related Domains

callfor.info

goodbe.co

gooqler.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.