b1.rivalgaming.com

Domain Privacy Service FBO Registrant.  (Proxy Registrant)

Domain Information

The domain b1.rivalgaming.com is registered by proxy through DOMAIN.COM, LLC and was originally registered in May of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Irvine, California within the United States which resides on the Future Ads LLC network.
Registrar:
DOMAIN.COM, LLC

Server location:
California, United States (US)

Create date:
Monday, May 12, 2008

Expires date:
Thursday, May 12, 2016

Updated date:
Friday, January 22, 2016

ASN:
AS4905 FA-LAX-1 - Future Ads LLC

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.RivalGaming.H, PUP.Installer.SavingsApps.F, PUP.Installer.BluPakSoftware.F, PUP.Installer.RivalGaming.F, PUP.Installer.EpicPlay, PUP.EpicPlay.Installer, PUP.InstallationSafe.Installer (M), PUP.EpicPlay.RivalGaming.Installer (M), PUP.Air Software.AirSoftware.Bundler (M), PUP.EpicPlay.RivalGam.Installer (M), PUP.Solimba.AppsInst.Bundler (M), PUP.EpicPlay (M)
97.73%

F-Secure
Application:W32/Generic.70053c248f!Online, Gen:Variant.Adware.Gamevance.15, Win32.Neshta.A
15.91%

VIPRE Antivirus
Threat.4139338, Threat.5065747, Threat.4725075, Threat.4782985
15.91%

Avira AntiVirus
ADWARE/Adware.Gen7, TR/Kazy.kjh, Adware/AirInst.1174
15.91%

IKARUS anti.virus
Trojan-Dropper.Agent, Trojan.Kazy, not-a-virus:AdWare.GameVance, Win32.SuspectCrc, AdWare.Airinstall
15.91%

Lavasoft Ad-Aware
Gen:Variant.Adware.Gamevance.15, Application.Bundler.AirInstaller.E
13.64%

F-Prot
W32/RivalGame.A.gen, W32/AirInstall.A.gen
13.64%

Dr.Web
Adware.GameVance.91, Adware.GameVance.113, Trojan.Fakealert.34581, Adware.Downware.1167
13.64%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Persi, not-a-virus:AdWare.Win32.AirAdInstaller
13.64%

Emsisoft Anti-Malware
Gen:Variant.Adware.Gamevance.15, Application.Bundler.AirInstaller
13.64%

avast!
Win32:Gamevance-EF [PUP], Win32:Adware-CAH [PUP]
13.64%

ESET NOD32
Win32/Adware.Gamevance.BP potentially unwanted application, Win32/Adware.Gamevance.BL potentially unwanted application, Win32/AirAdInstaller.A potentially unwanted application
13.64%

AVG
Adware Skodna.Gamevance, Adware Skodna.Gamevance.GF, Adware Skodna.Gamevance.RT, Adware Generic_r
13.64%

Sophos
PUA 'Rival Gaming' (of type Adware), PUA 'AirInstaller'
13.64%

MicroWorld eScan
Gen:Variant.Adware.Gamevance.15, Application.Bundler.AirInstaller.E
13.64%

The domain b1.rivalgaming.com has been seen to resolve to the following 9 IP addresses.

June 18, 2015

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

File downloads found at URLs served by b1.rivalgaming.com.

1 / 68      (Adware)
http://b1.rivalgaming.com/setup/.../SetupRG.exe  (f7740954f4e0740c3c75aa3dd9e088ee)

1 / 68      (Adware)
http://b1.rivalgaming.com/setup/.../Setup.exe  (6607b6aa6c90fe3c8bb60e1c1c7c83f3)

1 / 68      (Adware)

1 / 68      (Adware)

 
Latest 30 of 57 download URLs

URL:
http://b1.rivalgaming.com/

Web server:
nginx

30 of 32 related domains