» ot.track.121oda.com
Overview
Analysis
IPs Addresses (5)
Downloads (94)
Network (112)
Related Domains (39)

ot.track.121oda.com

German Castillo

Domain Information

The domain ot.track.121oda.com registered by German Castillo was initially registered in July of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

German Castillo

Registrar:

GODADDY.COM, LLC

Server location:

Arizona, United States (US)

Create date:

Wednesday, July 30, 2014

Expires date:

Saturday, July 30, 2016

Updated date:

Friday, July 31, 2015

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

Whois:

2 121oda.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Solimba.PopelerS.Installer (M), Threat.Win.Reputation.IMP, PUP.Solimba (M)

100.00%

The domain ot.track.121oda.com has been seen to resolve to the following 5 IP addresses.

ip-184-168-221-61.ip.secureserver.net

July 3, 2016

ec2-52-1-69-11.compute-1.amazonaws.com

May 3, 2015

ec2-52-1-26-95.compute-1.amazonaws.com

May 3, 2015

ec2-54-225-148-225.compute-1.amazonaws.com

August 24, 2014

ec2-107-20-149-171.compute-1.amazonaws.com

August 24, 2014

File downloads found at URLs served by ot.track.121oda.com.

1 / 68 (Malware)

http://ot.track.121oda.com/d/.../008343667009949332674?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../Ym89MiZjaXBpZD04MjcxMDAmY2lzaWQ9MzE0ODQ3ODYyMzg1NjEzMzA4NzI3ODc2JmNpcmlkPTMxNDg0Nzg2MjM4NTYxNDE2OTEyNDM5MjYmc2xpZD0wJnN1YmlkPTIwMDEwODMwMzExNTAwMDAwMCZjaXVpZD0tNDcyMTM0Njk2MjIyMTY0MTQyMSZzbz0yJmNyaWQ9MjM1Mzc4OCZleGNpZD0yMiZtbXQ9LTEmY250cnk9MjkmY2ljbXA9MzA2ODI4JnB1YmlkPTUxNjg0?exe_name=java (java.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6746776989 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6653926672 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6714067730 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008554266009976834715?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6654659241 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6802027333 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6779716253 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008343667009985744668?exe_name=java (java.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008147715010050352141?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6651809713 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../NzI0fDQ0MzF8UEx8M3wxfHw|1abca9f3a62dcf5a68068d827db66d21|b885e9b0-2305-11e4-936c-0025b320a860?exe_name=VideoPlayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6746702306 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008460040009986152557?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6668345438 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6652818681 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6714068325 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6732159361 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008553891009943763526?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6641573002 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6668271965 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6625906123 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6652455177 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6625378781 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6668416401 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008327090009953437736?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../008327090009954903113?exe_name=videoplayer (videoplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6746422559 (flashplayer.exe)

1 / 68 (Adware)

http://ot.track.121oda.com/d/.../6640631264 (flashplayer.exe)

Latest 30 of 94 download URLs

The following 112 files have been seen to comunicate with ot.track.121oda.com in live environments.

TCP » 184.168.221.61:80

googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.61:80

d9457dbd-e9ec-471a-9c02-e75612d4b90d-1-7.exe (SuperPlusRadio v2.1 by RadioCanyonv2)

TCP » 184.168.221.61:80

cf2f0c60-8b09-4897-ab0e-5643a89cf068-1-7.exe (CinemaP-1.8cV05.02 by Cinema PlusV05.02)

TCP » 184.168.221.61:80

d9457dbd-e9ec-471a-9c02-e75612d4b90d-11.exe (SuperPlusRadio v2.1 by RadioCanyonv2)

TCP » 184.168.221.61:80

spacesondpro_service.exe

TCP » 184.168.221.61:80

ebe2f2ab-ec9d-4de1-9cab-17c324c60b8f-1-7.exe (Ge-Force by Webar)

TCP » 184.168.221.61:80

d6ac52ba-b676-45f1-874e-5260240fef08-1-7.exe (SavePass 1.1 by OB)

TCP » 184.168.221.61:80

d6ac52ba-b676-45f1-874e-5260240fef08-11.exe (SavePass 1.1 by OB)

TCP » 184.168.221.61:80

eda806b4-1ce0-44a3-bd9b-5d75c59acf2e-1-7.exe (iWebar by Webby)

TCP » 184.168.221.61:80

ebe2f2ab-ec9d-4de1-9cab-17c324c60b8f-5.exe (Ge-Force by Webar)

TCP » 184.168.221.61:80

06e7c238-0bd3-4c50-996e-307ddae0b4cc-1-7.exe (Sense by Sense+)

TCP » 184.168.221.61:80

06e7c238-0bd3-4c50-996e-307ddae0b4cc-4.exe (Sense by Sense+)

TCP » 184.168.221.61:80

maxcomputercleaner_maintenance.exe

TCP » 184.168.221.61:80

eec96653-9a9c-43f7-ae9a-8b5f4f572f04-1-7.exe (Ge-Force by Webar)

TCP » 184.168.221.61:80

3529064f-7216-417e-9fb6-2a79d12d6aa5-1-7.exe (iWebar by Webby)

TCP » 184.168.221.61:80

3653bfbb-501c-413a-b9b3-d4a829f7492a-1-7.exe (SavePass 1.1 by OB)

TCP » 184.168.221.61:80

maxcomputercleaner_maintenance.exe

TCP » 184.168.221.61:80

84bc1794-f3d1-48d4-b8a0-d6577294876d-1-7.exe (TotalPlusHD-3.1V08.02 by HDPlus-3.1TotalV08.02)

TCP » 184.168.221.61:80

47e26a51-313e-4f6e-bfba-76003377a4c5-5.exe (I - Cinema by DiscountFrenzy)

TCP » 184.168.221.61:80

e7e7e2dd-a78c-4fb0-af33-bdbf9fbba620-6.exe (Sense by Object Browser)

Latest 20 of 115 files

Related Domains

automationcom.info

clipartpanda.com

colorindofb.net

deervalleyuser.info

download-bearshare.com

downloaddatu.com

downloadzone.org

easyseatpoker.com

exfilesdelivery.com

fluteflights.com

free-video-downloaders.com

getafilefast.net

gocloudnext.com

killedclicknext.com

minicomputeraccess.info

pixclicknext.com

30 of 39 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.