home

bidder-us-east-4.tlvmedia.com

TLV Media

Domain Information

The domain bidder-us-east-4.tlvmedia.com registered by TLV Media was initially registered in June of 2008 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Washington, District of Columbia within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
District of Columbia, United States (US)

Create date:
Thursday, June 19, 2008

Expires date:
Sunday, June 21, 2015

Updated date:
Saturday, June 21, 2014

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
tlvmedia.com

Whois:
1 tlvmedia.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
PUP-FBM!DC61776B9224
100.00%

Malwarebytes
PUP.Optional.Amonetize
100.00%

avast!
Win32:Amonetize-BX [PUP]
100.00%

Sophos
Amonetize
100.00%

Avira AntiVirus
ADWARE/Adware.Gen2
100.00%

AhnLab V3 Security
PUP/Win32.Amonetiz
100.00%

Baidu Antivirus
Adware.Win32.Amonetize
100.00%

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

MicroWorld eScan
Application.Bundler.Amonetize.L
100.00%

VIPRE Antivirus
Amonetize
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Riskware.Win32.Downware.daymkg
100.00%

Trend Micro House Call
TROJ_GEN.R0CBH06FM14
100.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
100.00%

Bitdefender
Application.Bundler.Amonetize.L
100.00%

The domain bidder-us-east-4.tlvmedia.com has been seen to resolve to the following IP address.

50.97.60.43
50.97.60.43-static.reverse.softlayer.com
December 1, 2014

File downloads found at URLs served by bidder-us-east-4.tlvmedia.com.

24 / 68    (PUP)
http://bidder-us-east-4.tlvmedia.com/.../texil.gif?subid=23062adYrXF6b18Ag7v4oKrgBiZjIwNWIzNjE3YTNjOGVkNDhmZTM3YTczYjIwMTYUrgc_0UO_AAEAAAAAADAEcdAAIgABAAAAAgABAAAADwABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABS7_VMZW4xMAEA&cost=0&ru=http://bidder.tlvmedia.com/.../click.php?subid=23062adYrXF6b18Ag7v4oKrgBiZjIwNWIzNjE3YTNjOGVkNDhmZTM3YTczYjIwMTYUrgc_0UO_AAEAAAAAADAEcdAAIgABAAAAAgABAAAADwABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABS7_VMZW4xMAEA&redir=aHR0cDovL3d3dy5uZXctaGRwbHVnaW4uY29tL2RpcmVjdC1kb3dubG9hZC5odG1sP3ZlcnNpb249MS4xLjUuODkmY2k9NzgyNCZjYXBwPUZsYXNoUGxheWVyJnRpMT0kUEFSQU0k&subid2=56f2aHR0cDovL3N0cmVhbWFsbHRoaXMubWUvd2F0Y2gvdGhlLWV4ZXMv&subid2=56f2aHR0cDovL3N0cmVhbWFsbHRoaXMubWUvd2F0Y2gvdGhlLWV4ZXMv  (flashplayer__6741_i829052686_il70.exe)

The following 11 files have been seen to comunicate with bidder-us-east-4.tlvmedia.com in live environments.

TCP » 50.97.60.43:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.97.60.43:443
browser.exe (Browser)

TCP » 50.97.60.43:80
browser.exe (Browser)

TCP » 50.97.60.43:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.97.60.43:443
apptrailers.exe

TCP » 50.97.60.43:443
browser.exe (Speed Browser by Smart Applications)

TCP » 50.97.60.43:80
client.exe

TCP » 50.97.60.43:80
browser.exe (speed browser by Fast Applications)

TCP » 50.97.60.43:443
online-guardian-v2.0.9.exe

TCP » 50.97.60.43:443
online-guardian-v2.0.9.exe

TCP » 50.97.60.43:80
tmpa921.exe

TCP » 50.97.60.43:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://bidder-us-east-4.tlvmedia.com/

Title:
“Test Page for the Nginx HTTP Server on EPEL”

SSL certificate subject:
CN=*.tlvmedia.com, OU=Domain Control Validated, O=*.tlvmedia.com

SSL certificate issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, O="GoDaddy.com, Inc."

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.