home

dataoftube.org

Private Person  (Proxy Registrant)

Domain Information

The domain dataoftube.org is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS50673 SERVERIUS-AS Serverius Holding B.V.,NL

Whois:
2 dataoftube.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DeltaBahn, PUP.iDatixCorporation, Threat.Win.Reputation.IMP, PUP.Amonitize.Dwndr (M), PUP.OOOSoftM (M), PUP.ABCDownloader.TOV.Meta (M), Adware.Bundler.iDatixCo.Meta (M)
100.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
30.00%

Dr.Web
Trojan.Packed.28628, Adware.Downware.6175, Trojan.Packed.30382
30.00%

F-Prot
W32/A-9fd749ff, W32/A-f4daa31c, W32/WebAlta.A2.gen
30.00%

Sophos
WebAlta Toolbar, PUA 'WebAlta Toolbar' (of type Adware)
30.00%

Avira AntiVirus
ADWARE/Adware.Gen
30.00%

NANO AntiVirus
Trojan.Win32.LMN.dcdhcq, Riskware.Win32.Agent.dbiwql, Riskware.Win32.Downware.ddpguw
30.00%

Comodo Security
ApplicUnwnt, Application.Win32.AgentCV.IAS, Application.Win32.Agent.WEFX
30.00%

Vba32 AntiVirus
Downware.iDatix.gen, Signed-Downware.iDatix
30.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Strictor.58276, Gen:Variant.Adware.Graftor.145543
20.00%

F-Secure
Gen:Variant.Adware.Strictor, Gen:Variant.Adware.Graftor
20.00%

Norman
Gen:Variant.Adware.Strictor.58276, Gen:Variant.Adware.Graftor.145543
20.00%

ESET NOD32
Win32/AdWare.Toolbar.Webalta.GH application, Win32/AdWare.Toolbar.Webalta.GN application
20.00%

AVG
Could be an adware AdLoad
20.00%

avast!
Win32:PUP-gen [PUP]
20.00%

The domain dataoftube.org has been seen to resolve to the following IP address.

217.12.209.86
May 28, 2015

File downloads found at URLs served by dataoftube.org.

1 / 68      (PUP)
http://dataoftube.org/.../go.php?sid=8&tds-key=????????? ??? ??????? ????? ?????  (sochinenie.exe)

1 / 68      (PUP)
http://dataoftube.org/.../go.php?sid=2&tds-key=??????? ????????? ?? ???? ??? ? ??????? ???  (archive.exe)

1 / 68      (PUP)
http://dataoftube.org/.../go.php?sid=38&tds-key=???????????? ????? ?????????  (instrukcija обогр.exe)

1 / 68      (Adware)
http://dataoftube.org/.../go.php?sid=26&tds-key=????????? ?????? ? ???? ???  (sochinenie.exe)

1 / 68      (Adware)
http://dataoftube.org/.../go.php?sid=2&tds-key=????????? ?? ???? ??? ????????? ??????????? ????????? ???????? ? ???????????? ?????  (sochinenie.exe)

1 / 68      (Adware)
http://dataoftube.org/.../go.php?sid=2&tds-key=??????? ????????? ??? ? ??? ?? ??????????????? ????????  (sochinenie.exe)

1 / 68      (Malware)
http://dataoftube.org/.../go.php?sid=16&tds-key=????? ???????? ? ???????? ???????? ????? ????  (blank.exe)

23 / 68    (PUP)
http://dataoftube.org/.../go.php?sid=23&tds-key=??? ??????? ??????? irf 630  (driver.exe)

27 / 68    (PUP)
http://dataoftube.org/.../go.php?sid=12&tds-key=???????? ?????? homecast c3200  (proshivka.exe)

17 / 68    (PUP)
http://dataoftube.org/.../go.php?sid=20&tds-key=?????????? ???????????? ??? kyocera ecosys m2535 dn kx  (archive.exe)

URL:
http://dataoftube.org/

Web server:
nginx

forevidload.com

instantfile.xyz

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.