The domain d.byteguardoptic.com registered by Beni Atenzon was initially registered in June of 2015 through ONLINENIC, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
ONLINENIC, INC.
Server location:
Arizona, United States (US)
Create date:
Friday, June 5, 2015
Expires date:
Sunday, June 5, 2016
Updated date:
Monday, June 8, 2015
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Scanner detections:
Detections (73% detected)
Scan engine
Details
Detections
ESET NOD32
Win32/Amonetize.HO potentially unwanted application, Win32/Amonetize.HR potentially unwanted application, Win32/Amonetize.HK potentially unwanted application
62.50%
McAfee
Trojan.Artemis!B5081938961D, Artemis!01A478E25BF0, Artemis!76039A8E70BE, Program.Artemis!A205AF928F9C, Program.Artemis!9EC2077C5574
62.50%
K7 AntiVirus
Unwanted-Program , Adware
62.50%
NANO AntiVirus
Riskware.Win32.Amonetize.dvccyq, Riskware.Win32.Amonetize.dvupxr, Trojan.Win32.Amonetize.dvrlle, Riskware.Win32.Amonetize.dvuqjo
62.50%
VIPRE Antivirus
Amonetize, Trojan.Win32.Generic
62.50%
Sophos
Generic PUA OE (PUA), Generic PUA BG (PUA), Generic PUA DP (PUA), Generic PUA GH (PUA), Generic PUA LK (PUA)
62.50%
Avira AntiVirus
ADWARE/Amonetize.kpb, ADWARE/Amonetize.Gen
62.50%
Fortinet FortiGate
Adware/Amonetize, Riskware/Amonetize
62.50%
AVG
Generic_r, BundleApp
62.50%
Qihoo 360 Security
Win32/Virus.Adware.528, HEUR/QVM10.1.Malware.Gen
62.50%
Dr.Web
infected with Trojan.Amonetize.4075
50.00%
Kaspersky
not-a-virus:AdWare.Win32.Amonetize
50.00%
Bkav FE
W32.HfsAdware
50.00%
Arcabit
PUP.Adware.Amonetize.eap, PUP.Adware.Amonetize.eas, Application.Imonetize.2
50.00%
Trend Micro House Call
TROJ_GE.BE80232F, TROJ_GE.4CAEB7A8, TROJ_GE.BCC69D76
50.00%
The domain d.byteguardoptic.com has been seen to resolve to the following 3 IP addresses.
File downloads found at URLs served by d.byteguardoptic.com.
URL:
http://d.byteguardoptic.com/
SSL certificate subject:
CN=sni117183.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
cloudflare-nginx (PHP/5.4.37)