home

pofj.gamingcandy.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain pofj.gamingcandy.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Tuesday, March 31, 2015

Expires date:
Friday, March 31, 2017

Updated date:
Friday, April 1, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Root domain:
gamingcandy.com

Whois:
2 gamingcandy.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.GamingCa (M), PUP (M), PUP.GamingCandy (M)
100.00%

The domain pofj.gamingcandy.com has been seen to resolve to the following 3 IP addresses.

74.120.16.179
September 3, 2016

50.63.202.53
ip-50-63-202-53.ip.secureserver.net
April 7, 2016

162.251.166.250
November 18, 2015

File downloads found at URLs served by pofj.gamingcandy.com.

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=OTM2OTk2MzQ2OXJVuVVSTi6mfzh6JBt 4EjVeyJPSQnZcG6TDqLgprM24Iwt7vBivmdr09XP2wNtpLMX9QJ3BMfraW/FwPzbteO8Cd69VzMfp/.../HsMOJEXBXAeChBA==  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=YTE4OTQ0NjIzOTbboUUqDbSzw8/f3jjR/.../raORZocqLcw z3NDsHX2RnsTXLWbfn4rPwxy5ZWYFFCsvkV1GvN7Xg6AnpY3DS8MU6vpiIYRwn6Kr3rMyWWd91Y=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=YTEzNTY4Njk3MzHboUUqDbSzw8/.../ffLqNJ7pcHAwbLfTRESUjNKVDZ MSt44QxdaTCAYS8HcaATXLWbfn4rP6JLtzjSGCPYnip8 nPDNpsNCsqkxZTg1JKXwVCkGpBeoaPQqzKMrYw=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=YTIzNjY0NTIxMjPboUUqDbSzw8/.../ffLqNJ7pcHAwbJh0jxR02MmCGsmkTOShsJNQ7UJbT4yEEETXLWbfn4rP6JLtzjSGCPYnip8 nPDNpsgzKnueDUsktnAAHCC07Wf7hXIiJygqcQ=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/.../OMBhfGWiyQtt6BnL4=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=OTg4NDYxODQ0OduhRSoNtLPDT4 A gHpn4yy9vVY6pUn3fhrX7QZy5OJ/G2eVnR867BnrIy0MwmoqxNctZt fis/xrOdiLi963DwLuzW4wz272oAOFrn26UiCAlxl1CNzIHqH4P//hKFWg==  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/.../inst?i=YTMzNTcyOTEwOTfboUUqDbSzw0 PgPoB6Z Msvb1WOqVJ915QMpYyug8RqpvCG26AmyZArZJy 18mOWxzh5udUBCB7rgZIMfps5D8y6jdurCcNznAuyvzMguulfG0wwJWDZyeq6btTsZYnw=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTIyMDQ5MDY4NzPboUUqDbSzw8/f3jjR/.../4qQoZpiuidbHbrFuI0E1s1I5aTsiaAPKCaOkE2hDEeDzvvlIXMB8M0=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=YTE3NTAwMjA5OTHboUUqDbSzw8/f3jjR/.../Y5xM=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/.../E75h6uClDsZGW9LyfvChZNmAa1LfLK3NsBnMEqQ8g3quaPE=  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=OTQ2MzgxMTY5MtuhRSoNtLPDz9/.../UMRmxECiR1XLHOHm51QEIHn0cwgZY0drvjyXqh781bNjP4yFy9KVz4vLaIMPT mz36rV tkDTrTw==  (gamingcandygames.exe)

1 / 68      (Malware)
http://pofj.gamingcandy.com/prm/inst?i=YTM1NTg0MjE2NDRnkJFfktARsXc39IUjVCyS97Ro1gP1WYW2yNG7UiYyt9vb5US/.../oEOhaCC sgQGzVfjrl6g Q7hm2tEmJnBJ2EhcqHCetzipK0=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTQxOTA3NzY5NzmDrYJpLNsFBa6nPqDEfQ7neTHkuKNYjFEYgapAjOO2ytMM9ryApT0PXgW5YnDVRBfha7i8l986d7W/fh9PkU9Hg3tn/.../k95f1yKPmhS7QIY2I9w=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTE5MDQ5NDcwODfboUUqDbSzw8/f3jjR/ffLwXtRhYbZ5GgXULi2OjEbnqzBBA05Ym7Ft YradINH2Wxzh5udUBCBz/4Y4YSK/.../v8aOEFvllz9JZcGpfGR vZq2J0rMoGwvL1s=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTI2ODAxMDcyNDLboUUqDbSzw8/f3jjR/ffLqNJ7pcHAwbLkIzU/aNEt9ENkth0jUJ/.../2Uk GwURk0aILAhCHhEXLFHoqwtvilIseof4fHt8DpzmZkcUNp8neQ=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTE5NDk5MDc4MjjboUUqDbSzw8/.../ffLwXtRhYbZ5GiJDOvEtJHMg7m7AzjpXtvoal4JCItdr2 A5iPstYfGdZVT9b6P6eGm0rigOQyc7X6AVDsnj7 M6iFRnrQH10mgRU qs4vYVH7pTP4giPlr6g==  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTEwNDI4MjA5NTjboUUqDbSzw8/f3jjR/.../JA7OxH6Q=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTE1NzQzODQ0ODjboUUqDbSzw8/f3jjR/ffLwXtRhYbZ5GiZrPug e/.../GdrJNWA6cQCGIW9ikymI4=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTE1ODMyOTc2NDbboUUqDbSzw8/f3jjR/ffLwXtRhYbZ5Ggp0IbIAKXjuFqwdvJOhJ/DzPADiPWGo kbOnf7jFFq/.../c=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTMxMjg5NjQ0NznboUUqDbSzw8/f3jjR/ffLwXtRhYbZ5GinJDLw/.../jtrpPngkidLVLY1R4mnSoVjWn9cCo=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/.../r6AHdcpVSMIxNIOTqXSXz2OTK5JT6gvBItLFLjEk4ftUJSsISbRsCdAJuZFDJ b7tbnNRbYefwpBR67FLHw53iQCw==  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTExOTAzNDMxODSu4/jhaVyXr3brBVCki6u BS3aDE2Z6Qp1yOUo1xsCG53XBvtvSDmk6JcGSG5mRdxp1BB1J/HhR5CEgIFh8VBC298aUijY0AsKs7sOIXWP5dqPuPfExJz8e5YxLs//Ru8=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTIzMDk4Mjk3MjnboUUqDbSzw8/f3jjR/ffLqNJ7pcHAwbLuvavoXh2LcHg6g/.../O4OvEy98zqhFMjcc9xRZPVB8P4mY7kl1t2B8bP4NH2s3P T8=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTI0MDE1MTM1OTPUAzqAEwnxCvcQbmKFzCGHDg0Ax4Ss/.../nyCqhLPf9jnCPxpxKJ0bf28k=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTE2OTcwMDEyNTDboUUqDbSzw0 PgPoB6Z Msvb1WOqVJ90NFbXrJCTzsa1r4mXKA22pTruOJRbrAWUbOnf7jFFq/.../cnDWt4rcoUYklEoK1m2yqhkNAJPwrdtWIMUSbv9Eh9EukMdTg=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTQxNDY2MDY2MTjboUUqDbSzw8/.../ffLqNJ7pcHAwbIUMP1CkDDTg dBgmQDuKABoUBwdHPfSH3GsPtGGXiUTWxh6lMpu841NXiDleUQ4U2HChQrPToDuWKLzgKNVXH46Uz IIj5a o=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTE5NDQyNjg2MzLboUUqDbSzw8/f3jjR/ffLwXtRhYbZ5GgQaRo3GMV0R6w8wUrh0QVyLOxA9SSD63obOnf7jFFq/.../B43HKEahB1pas7JIJg=  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=OTE2MjQxMDQ3N9uhRSoNtLPDz9/eONH998uo0nulwcDBsg/.../XPV8MItW4Gzepy WkALn0NaLHOHm51QEIHodvuMSsMfNacXv54cfYewQhrbmbjDoOdInE2MlNPeGwnMUrYZBTRGQ==  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/.../LgEAxIp7uoBIYgCVwKbhDTCgHLTnztUJ2GUzUUvniedavxycQloRvpTP4giPlr6g==  (gamingcandygames.exe)

1 / 68      (PUP)
http://pofj.gamingcandy.com/prm/inst?i=YTI2NTkzMzIzNzjboUUqDbSzw8/f3jjR/ffLwXtRhYbZ5GjzshmE58p/HQn/.../wHFUr2vFvpZJPwhloslS9337 ZoS77toCaOkE2hDEeDgTaorPgEcJI=  (gamingcandygames.exe)

 
Latest 30 of 225 download URLs

The following 67 files have been seen to comunicate with pofj.gamingcandy.com in live environments.

TCP » 50.63.202.53:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 50.63.202.53:80
cykimhegigka.exe

TCP » 50.63.202.53:80
i - cinema-codedownloader.exe (I - Cinema by DiscountFrenzy)

TCP » 50.63.202.53:80
6a67de50-6a9b-4f9c-9cc4-95caeb8586f7-4.exe (I - Cinema by DiscountFrenzy)

TCP » 50.63.202.53:80
20dcafcc-a016-4b7e-b21d-694da8a1f029-10.exe (CinPlus-AI1.5cV08.12 by Cin-PlusAI1.5cV08.12)

TCP » 50.63.202.53:80
app lid-codedownloader.exe (App Lid by Lid)

TCP » 50.63.202.53:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.53:80
65bc6fda-630e-4a84-8556-44637d32bc1c-5.exe (TheHDvid-Codec V10 by home)

TCP » 50.63.202.53:80
cmyydakl.exe (CinePlus-1.2V08.12 by CinemaPlusV08.12)

TCP » 50.63.202.53:80
af74275d-c6ce-4436-bf7d-591ccf5c6a4b-6.exe (iWebar)

TCP » 50.63.202.53:80
1d4cd6f9-e90c-4aff-9e76-fea48bf8349d-4.exe (Media+PlayerVidEd2.0 by Enter)

TCP » 50.63.202.53:80
jingling.exe

TCP » 50.63.202.53:80
sense-codedownloader.exe (Sense by Object Browser)

TCP » 50.63.202.53:80
iwebar-nova.exe (iWebar)

TCP » 50.63.202.53:80
sense-nova.exe (Sense by Object Browser)

TCP » 50.63.202.53:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 50.63.202.53:80
abb1213.tmp

TCP » 50.63.202.53:80
65bc6fda-630e-4a84-8556-44637d32bc1c-4.exe (TheHDvid-Codec V10 by home)

TCP » 50.63.202.53:80
ozan.exe (Sense by Object Browser)

TCP » 50.63.202.53:80
ixoyhgs.exe (SmartSaver+ 15 by smart-saverplus)

 
Latest 20 of 67 files

URL:
http://pofj.gamingcandy.com/

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.