home

centijo.net

REACTIVATION PERIOD

Domain Information

The domain centijo.net registered by REACTIVATION PERIOD was initially registered in February of 2013 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Montreal, Quebec within Canada which resides on the OVH Hosting, Inc. network.
Registrar:
ENOM, INC.

Server location:
Quebec, Canada (CA)

Create date:
Thursday, February 28, 2013

Expires date:
Sunday, February 28, 2016

Updated date:
Monday, April 11, 2016

ASN:
AS16276 OVH OVH SAS,FR

Whois:
4 centijo.net records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BRSOFTWARE.AA, PUP.Midia Technologies.MidiaTechnologies.Bundler (M), PUP.BR Software.BRSOFTWA (M), PUP.Midia Technologies.MidiaTec.Bundler (M), PUP.Midia Technologies (M), PUP.BR Software (M)
100.00%

The domain centijo.net has been seen to resolve to the following 9 IP addresses.

5.39.99.52
June 8, 2016

5.39.99.50
May 31, 2016

167.114.156.214
ns513839.ip-167-114-156.net
May 22, 2016

8.5.1.46
April 1, 2016

82.221.105.13
February 25, 2016

82.221.105.12
January 29, 2016

198.50.209.4
May 4, 2015

192.99.4.18
onlinemidia.com
July 31, 2014

198.50.154.158
May 7, 2014

File downloads found at URLs served by centijo.net.

1 / 68      (Adware)
http://centijo.net/ids/.../Download CD Festa de São João 2014.zip  (download cd festa de so joo 2014.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download PC X-men vs Street fighter.zip  (download pc x-men vs street fighter.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download Bruno Mars – When I Was Your Man 2013.zip  (download bruno mars when i was your man 2013.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download – PC Tekken 3 Completo.zip  (download – pc tekken 3 completo.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download – DVD Patatí Patatá – Na Cidade dos Sonhos Dvdrip Infantil.zip  (download dvd patat patat na cidade dos sonhos dvdrip infantil.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download Jack O Caçador de Gigantes Dublado.zip  (download jack o caador de gigantes dublado.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download – CD Fresno – Revanche 2010.zip  (download cd fresno revanche 2010.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download Norbit: Uma Comédia de Peso Dublado e Legendado.zip  (download norbit- uma comdia de peso dublado e legendado.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download Mc Sapão: Classe A.zip  (download mc sapo- classe a.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download – PC: Theme Hospital.zip  (download pc- theme hospital.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download – PC: Theme Hospital.zip  (download pc- theme hospital.zip.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download Revista Sexy Carol Nakamura Novembro 2011.zip  ({blocked}.exe)

1 / 68      (Adware)
http://centijo.net/ids/.../Download Game Of Thrones 4 Temporada Episódio 05 First of His Name Dublado e Legendado S04E05.zip  (download game of thrones 4 temporada episódio 05 first of his name dublado e legendado s04e05.zip.ex)

The following 36 files have been seen to comunicate with centijo.net in live environments.

TCP » 167.114.156.214:3333
webproxy.exe

TCP » 167.114.156.214:80
setup_info.exe

TCP » 167.114.156.214:80
tencent.exe (by Tencent)

TCP » 167.114.156.214:80
rs.exe

TCP » 167.114.156.214:80
loader.exe (Updater by SOFTWARE AGILITY LIMITED)

TCP » 167.114.156.214:80
win.exe (SendStat Module)

TCP » 167.114.156.214:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 167.114.156.214:80
ProxyFinder.EXE (Proxy Finder Enterprise Edition Application)

TCP » 167.114.156.214:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 167.114.156.214:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 167.114.156.214:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 167.114.156.214:80
deamon.exe

TCP » 167.114.156.214:80
run_css.exe

TCP » 167.114.156.214:1177
pirater facebook v1.0.exe

TCP » 167.114.156.214:80
Updater.exe (Updater)

TCP » 167.114.156.214:80
internet tv.exe

TCP » 167.114.156.214:80
kingtranslatesetup.exe (KingTranslate by Bandoo Media Inc)

TCP » 167.114.156.214:80
kingtranslatesetup-r0-n-bc.exe (KingTranslate by Koyote-Lab)

TCP » 167.114.156.214:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 167.114.156.214:80
Updater.exe (Updater)

 
Latest 20 of 41 files

May 7, 2014
www.centijo.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.