home

dichvumotor.com

Thang Luu

Domain Information

The domain dichvumotor.com registered by Thang Luu was initially registered in October of 2015 through GODADDY.COM, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Phoenix, Arizona within the United States which resides on the SingleHop, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Thursday, October 22, 2015

Expires date:
Saturday, October 22, 2016

Updated date:
Thursday, October 22, 2015

ASN:
AS32475 SINGLEHOP-INC - SingleHop,US

Whois:
1 dichvumotor.com record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Quick Heal
Ransom.Crowti.MUE.A4
100.00%

avast!
Win32:Malware-gen
100.00%

Kaspersky
UDS:DangerousObject.Multi.Generic
100.00%

Trend Micro
Ransom_LOCKY.KA
100.00%

Sophos
Mal/Generic-S
100.00%

Avira AntiVirus
TR/FileCoder.Locky.56754
100.00%

Qihoo 360 Security
HEUR/QVM07.1.Malware.Gen
100.00%

The domain dichvumotor.com has been seen to resolve to the following IP address.

99.198.116.211
phx20.stablehost.com
May 17, 2016

File downloads found at URLs served by dichvumotor.com.

7 / 68      (Malware)
http://dichvumotor.com/89h766b.exe  (vyfrolv.exe)

The following file have been seen to comunicate with dichvumotor.com in live environments.

TCP » 99.198.116.211:80
online-guardian-v2.0.9.exe

URL:
http://dichvumotor.com/

Title:
“Dịch Vụ Motor”

Description:
“Megashop”

appads.info

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.