home

d7.sevas-s.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain d7.sevas-s.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2012. The hosted servers are located in Manassas, Virginia within the United States which resides on the Leaseweb USA, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 5, 2012

Expires date:
Saturday, March 5, 2016

Updated date:
Monday, July 21, 2014

ASN:
AS30633 LEASEWEB-US - Leaseweb USA, Inc.,US

Root domain:
sevas-s.com

Whois:
2 sevas-s.com records

The domain d7.sevas-s.com has been seen to resolve to the following IP address.

207.244.67.199
hosted-by.leaseweb.com
February 3, 2014

File downloads found at URLs served by d7.sevas-s.com.

0 / 68
http://d7.sevas-s.com/old/.../download-TorchSetup.exe  (66d723112ede9f6c5ebb6edac94f4004)

0 / 68
http://d7.sevas-s.com/.../minecraft_server.1.7.9.exe  (1f4a3e8f4b36462c999cd9c2f5e1a602)

0 / 68
http://d7.sevas-s.com/.../the-sims-3-patch-1.67.2.exe  (ts3_1.67.2.0240xx_update.exe)

3 / 68      (PUP)
http://d7.sevas-s.com/.../photoscape-3.6.5.exe  (PhotoScape_V3.6.5.exe)

0 / 68
http://d7.sevas-s.com/.../windows-movie-maker-2.6.4037.0.msi  (MM26_ENU.msi)

9 / 68      (PUP)
http://d7.sevas-s.com/.../orbit-downloader-4.1.1.0.exe  (5643803_stp.exe)

2 / 68      (Malware)
http://d7.sevas-s.com/.../Minecraft.exe  (3c166bae84553d4cb27af8abdc61712d)

5 / 68      (Unwanted)
http://d7.sevas-s.com/.../daemon-tools-4.48.1.exe  (62031478_stp.exe)

The following 2 files have been seen to comunicate with d7.sevas-s.com in live environments.

TCP » 207.244.67.199:80
directx11.exe (DirectX 11.0)

TCP » 207.244.67.199:80
hss3.42installe550plain.exe (Hotspot Shield)

URL:
http://d7.sevas-s.com/

Web server:
nginx

innovativesys.co

jdcdn.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.