home

bolivia10.com

Domain Information

Server location:
California, United States (US)

ASN:
AS26008 NOMINUM-SKYE1 - SKYE

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Kaspersky
HEUR:Trojan.Win32.Generic
100.00%

Comodo Security
UnclassifiedMalware
100.00%

Avira AntiVirus
TR/Agent.45056
100.00%

The domain bolivia10.com has been seen to resolve to the following IP address.

199.101.28.20
search.dnsassist.verizon.net
May 1, 2014

File downloads found at URLs served by bolivia10.com.

3 / 68      (Malware)
http://bolivia10.com/css/css/files/.../MensajeTerra.exe  (fdc8b173e6be45eb5ea61da50872666c)

The following 46 files have been seen to comunicate with bolivia10.com in live environments.

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
datapump.crx

 
Latest 20 of 46 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.