» dds5.fb-hosting-apps.com
Overview
Analysis
IPs Addresses (2)
Downloads (14)

dds5.fb-hosting-apps.com

Whois Privacy Corp.

Domain Information

The domain dds5.fb-hosting-apps.com registered by Whois Privacy Corp. was initially registered in January of 2013 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).

Registrant:

Whois Privacy Corp.

Registrar:

INTERNET.BS CORP.

Server location:

New York, United States (US)

Create date:

Saturday, January 5, 2013

Expires date:

Monday, January 5, 2015

Updated date:

Thursday, December 5, 2013

ASN:

AS13335 CLOUDFLARENET - CloudFlare, Inc.

Root domain:

fb-hosting-apps.com

Whois:

2 fb-hosting-apps.com records

Scanner detections:

Detections (75% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.Amonetizeltd.j, PUP.Installer.Amonetizeltd.y, PUP.Installer.Amonetizeltd.w

75.00%

McAfee

Adware-Amonetize!67C4C188D54D, Adware-Amonetize!815F42A15472, Adware-Amonetize!B93D7367FC0C

75.00%

Malwarebytes

PUP.Optional.InstallMonetizer

75.00%

Trend Micro House Call

TROJ_GEN.F47V0205, TROJ_GEN.F47V0206, TROJ_GEN.F47V0204

75.00%

Comodo Security

ApplicUnwnt

75.00%

Dr.Web

Adware.Downware.1655

75.00%

VIPRE Antivirus

Amonetize

75.00%

Sophos

Amonetize

75.00%

AhnLab V3 Security

PUP/Win32.Amonetiz

75.00%

ESET NOD32

Win32/Amonetize.AD (variant), Win32/Amonetize.AE (variant)

75.00%

Fortinet FortiGate

Riskware/Amonetize

75.00%

AVG

MalSign.Generic, Generic_r, Generic5

75.00%

Avira AntiVirus

ADWARE/Adware.Gen2

50.00%

avast!

Win32:Amonetize-E [PUP], Win32:PUP-gen [PUP]

50.00%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

25.00%

The domain dds5.fb-hosting-apps.com has been seen to resolve to the following 2 IP addresses.

108.162.196.254

(CloudFlare)

March 14, 2014

108.162.197.254

(CloudFlare)

March 14, 2014

File downloads found at URLs served by dds5.fb-hosting-apps.com.

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Simcity 3000 Portable_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Simcity 3000 Portable&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-06T00:49:08.179082 00:00&parameter=Simcity 3000 Portable&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-06T00:49:08.179082 00:00&parameter=Simcity 3000 Portable&ti1=1405000&ti2=0&ti3=2014-02-06T00:49:08.179082 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

14 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=Downloader_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.somedownload.com/d1/logo150x150.png&prefix=Downloader&instid[thankyoupage]=http://download.somedownload.com/.../thank_you.php?ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00&parameter=Downloader&instid[interrupted]=http://download.somedownload.com/.../interrupted.php?ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00&parameter=Downloader&ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00 (quickbooks pro 2002 software__3038_i330256060_il767893.exe)

14 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Downloader_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.somedownload.com/d1/logo150x150.png&prefix=Downloader&instid[thankyoupage]=http://download.somedownload.com/.../thank_you.php?ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00&parameter=Downloader&instid[interrupted]=http://download.somedownload.com/.../interrupted.php?ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00&parameter=Downloader&ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00 (quickbooks pro 2002 software__3038_i330256060_il767893.exe)

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=Isyncr For Pc Apk_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Isyncr For Pc Apk&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-05T20:51:51.007628 00:00&parameter=Isyncr For Pc Apk&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-05T20:51:51.007628 00:00&parameter=Isyncr For Pc Apk&ti1=1460000&ti2=0&ti3=2014-02-05T20:51:51.007628 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

14 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Edius 4 free download full version_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.futuresdownload.com/d1/logo150x150.png&prefix=Edius 4 free download full version&instid[thankyoupage]=http://download.futuresdownload.com/.../thank_you.php?ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00&parameter=Edius 4 free download full version&instid[interrupted]=http://download.futuresdownload.com/.../interrupted.php?ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00&parameter=Edius 4 free download full version&ti1=700000&ti2=0&ti3=2014-02-07T03:06:35.403581 00:00 (trojan killer activation code__3515_i339083141_il2529341.exe)

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Freight Sans Pro Light_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Freight Sans Pro Light&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-06T04:29:55.236053 00:00&parameter=Freight Sans Pro Light&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-06T04:29:55.236053 00:00&parameter=Freight Sans Pro Light&ti1=1405000&ti2=0&ti3=2014-02-06T04:29:55.236053 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

2 / 68 (false positives)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Virtually Jenna v3 3 xxx pc games_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.somedownload.com/d1/logo150x150.png&prefix=Virtually Jenna v3 3 xxx pc games&instid[thankyoupage]=http://download.somedownload.com/.../thank_you.php?ti1=400000&ti2=3&ti3=2014-02-07T20:18:44.547796 00:00&parameter=Virtually Jenna v3 3 xxx pc games&instid[interrupted]=http://download.somedownload.com/.../interrupted.php?ti1=400000&ti2=3&ti3=2014-02-07T20:18:44.547796 00:00&parameter=Virtually Jenna v3 3 xxx pc games&ti1=400000&ti2=3&ti3=2014-02-07T20:18:44.547796 00:00 (wrar420.exe)

14 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Allaire Homesite 4.0_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Allaire Homesite 4.0&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-07T02:59:21.906652 00:00&parameter=Allaire Homesite 4.0&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-07T02:59:21.906652 00:00&parameter=Allaire Homesite 4.0&ti1=1405000&ti2=0&ti3=2014-02-07T02:59:21.906652 00:00 (trojan killer activation code__3515_i339083141_il2529341.exe)

14 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Allaire Homesite 4.0_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Allaire Homesite 4.0&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-07T02:59:21.906652 00:00&parameter=Allaire Homesite 4.0&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-07T02:59:21.906652 00:00&parameter=Allaire Homesite 4.0&ti1=1405000&ti2=0&ti3=2014-02-07T02:59:21.906652 00:00 (trojan killer activation code__3515_i339083141_il2529341.exe)

14 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Allaire Homesite 4.0_Downloader&instid[appsetupurl]=http://cdn1.reliabletrusteddownloads.com/d1/MiniGetSetup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Allaire Homesite 4.0&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=2014-02-07T02:55:52.284897 00:00&parameter=Allaire Homesite 4.0&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=2014-02-07T02:55:52.284897 00:00&parameter=Allaire Homesite 4.0&ti1=1405000&ti2=0&ti3=2014-02-07T02:55:52.284897 00:00 (trojan killer activation code__3515_i339083141_il2529341.exe)

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3039&instid[appname]=Srs Premium Sound Software Dell_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Srs Premium Sound Software Dell&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-05T22:17:39.268737 00:00&parameter=Srs Premium Sound Software Dell&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-05T22:17:39.268737 00:00&parameter=Srs Premium Sound Software Dell&ti1=1460000&ti2=0&ti3=2014-02-05T22:17:39.268737 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3038&instid[appname]=Srs Premium Sound Software Dell_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Srs Premium Sound Software Dell&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-05T22:17:00.260190 00:00&parameter=Srs Premium Sound Software Dell&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-05T22:17:00.260190 00:00&parameter=Srs Premium Sound Software Dell&ti1=1460000&ti2=0&ti3=2014-02-05T22:17:00.260190 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3515&instid[appname]=Toshiba Password Utility 2.0_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Toshiba Password Utility 2.0&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-06T10:38:17.218479 00:00&parameter=Toshiba Password Utility 2.0&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-06T10:38:17.218479 00:00&parameter=Toshiba Password Utility 2.0&ti1=1460000&ti2=0&ti3=2014-02-06T10:38:17.218479 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

13 / 68 (Adware)

http://dds5.fb-hosting-apps.com/download.php?version=1.1.1.20&campid=3516&instid[appname]=Toshiba Password Utility 2.0_Downloader&instid[appsetupurl]=http://download.deluge-torrent.org/windows/deluge-1.3.6-win32-setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=Toshiba Password Utility 2.0&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=2014-02-06T10:38:17.218479 00:00&parameter=Toshiba Password Utility 2.0&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=2014-02-06T10:38:17.218479 00:00&parameter=Toshiba Password Utility 2.0&ti1=1460000&ti2=0&ti3=2014-02-06T10:38:17.218479 00:00 (sephilia fight__3515_i332946344_il1330221.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.