c52624b9.down5bucket.us
mike peters
Domain Information
The domain c52624b9.down5bucket.us registered by mike peters was initially registered in September of 2014 through Internet.bs Corp.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
Internet.bs Corp.
Server location:
Texas, United States (US)
Create date:
Sunday, September 28, 2014
Expires date:
Sunday, September 27, 2015
Updated date:
Sunday, September 28, 2014
ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.R2D2TechSoftware.T
100.00%
Malwarebytes
PUP.Optional.CodecPerformer.A
100.00%
Comodo Security
Application.Win32.InstallBrain.BF
100.00%
Dr.Web
Adware.Downware.2473
100.00%
VIPRE Antivirus
InstallBrain
100.00%
ESET NOD32
Win32/InstallBrain.BS (variant)
100.00%
AVG
MalSign.InstallC
100.00%
MicroWorld eScan
Gen:Variant.Jaik.1231
100.00%
Bitdefender
Gen:Variant.Jaik.1231
100.00%
Lavasoft Ad-Aware
Gen:Variant.Jaik.1231
100.00%
Emsisoft Anti-Malware
Gen:Variant.Jaik.1231
100.00%
G Data
Gen:Variant.Jaik.1231
100.00%
Agnitum Outpost
PUA.InstallBrain
100.00%
Sophos
InstallBrain
100.00%
NANO AntiVirus
Riskware.Win32.Downware.cwmdeh
100.00%
The domain c52624b9.down5bucket.us has been seen to resolve to the following 4 IP addresses.
173.192.190.227-static.reverse.softlayer.com
November 2, 2014
50.97.49.242-static.reverse.softlayer.com
November 2, 2014
50.97.44.131-static.reverse.softlayer.com
November 2, 2014
174.37.181.31-static.reverse.softlayer.com
November 2, 2014
File downloads found at URLs served by c52624b9.down5bucket.us.
The following 17 files have been seen to comunicate with c52624b9.down5bucket.us in live environments.
URL:
http://c52624b9.down5bucket.us/
Web server:
nginx/1.2.4 (PHP/5.3.16)
