home

divx.descargar.es

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.

Root domain:
descargar.es

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FormulaEFTEuropaSL.Z, PUP.installCore.ExtendedSetup (M), PUP.Vittalia.100Blogs.Bundler (M)
100.00%

The domain divx.descargar.es has been seen to resolve to the following 5 IP addresses.

109.70.130.155
155.130.70.109.factoriadigital.com
August 1, 2016

185.57.173.188
April 2, 2016

185.47.13.82
April 2, 2016

93.189.35.250
February 19, 2014

93.189.35.248
me.paso.sin.aimb0t.co.cc
February 19, 2014

File downloads found at URLs served by divx.descargar.es.

1 / 68      (Adware)
http://divx.descargar.es/.../down.php?p=BR-ADSTERRA&trckid=MTU3fDY4NXxCUnwzfDF8fGEyVjVkMjl5WkEqUWxCTklDNGdVM1IxWkdsdklEUXVPUzR4SUNBZ1UydHBibk1nSUNCRGNtRmpheTR1VFhWdVpHOU1iMkZrTG1Kc2IyZHpjRzkwTG1OdmJTNXlZWEk|6eced7b5e540a6d8520d4834ab52ba27  (installer_divx_portuguese.exe)

1 / 68      (Adware)
http://divx.descargar.es/.../down.php?p=BR-ADSTERRA-MTU3fDY4NXxCUnwzfDF8fGEyVjVkMjl5WkEqUkdselkyOW5jbUZtYVdFdUxpNUtaV2wwYnk1TmIyeGxjWFZsTGk0dWQzZDNMbTExYzJsallYTndZWEpoWW1GcGVHRnlMbTl5Wnk1eVlYSQ|6eced7b5e540a6d8520d4834ab52ba27  (installer_divx_portuguese.exe)

1 / 68      (Adware)
http://divx.descargar.es/.../down.php?p=BR-ADSTERRA-MTU3fDY4NXxCUnwzfDF8fGEyVjVkMjl5WkEqUTNWeWMyOGdaR1VnWlhOd1lXNW9iMndnVzNKbGFXUmhjMkZ3YjNOMGFXeGhjeTVpYkc5bmMzQnZkQzVqYjIxZExtUnZZdw|6eced7b5e540a6d8520d4834ab52ba27  (installer_divx_portuguese.exe)

The following 5 files have been seen to comunicate with divx.descargar.es in live environments.

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 109.70.130.155:80
cyberclient.exe (CyberPlanet by Proyecto Redes)

TCP » 109.70.130.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.