home

doc-0k-9o-docsviewer.googleusercontent.com

Google Inc.

Domain Information

This domain is used by the Google drive/ Google documents service to share public files but Google itself does not host legitimate Google files on this domain, it is simply for user's of the Drive service. The domain doc-0k-9o-docsviewer.googleusercontent.com registered by Google Inc. was initially registered in November of 2008 through MARKMONITOR INC.. The domain hosts various software downloads. The hosted servers are located in Mountain View, California within the United States which resides on the Google Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
California, United States (US)

Create date:
Monday, November 17, 2008

Expires date:
Monday, November 17, 2014

Updated date:
Thursday, October 17, 2013

ASN:
AS15169 GOOGLE - Google Inc.

Root domain:
googleusercontent.com

Whois:
1 googleusercontent.com record

Scanner detections:
Malware distribution  (100% detected)

Note:
While the domain hosts possible unwanted files, it is owned and operated by Google which DOES NOT distribute these files. The files are public using the Google Drive service by individual users.

Scan engine
Details
Detections

Bkav FE
W32.Cloddcf.Trojan
100.00%

MicroWorld eScan
TR/Agent.VB.3208
100.00%

McAfee
Artemis!1F9BA56272B2
100.00%

Malwarebytes
Trojan.Dropper.SFX
100.00%

Norman
Suspicious_Gen4.BVSLQ
100.00%

Trend Micro House Call
HKTL_ACTVATR
100.00%

ViRobot
Trojan.Win32.A.Zbot.2494473
100.00%

Sophos
Troj/Crack-AP
100.00%

Dr.Web
Trojan.DownLoader8.62080
100.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
100.00%

Trend Micro
HKTL_ACTVATR
100.00%

Panda Antivirus
Trj/Agent.MIZ
100.00%

ESET NOD32
Win32/HackTool.WinActivator
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.148FDD27!344972583
100.00%

Reason Heuristics
Unnamed.Threat.32
100.00%

The domain doc-0k-9o-docsviewer.googleusercontent.com has been seen to resolve to the following 3 IP addresses.

74.125.226.10
lga15s42-in-f10.1e100.net
May 30, 2014

74.125.226.12
lga15s42-in-f12.1e100.net
May 30, 2014

74.125.226.11
lga15s42-in-f11.1e100.net
May 30, 2014

File downloads found at URLs served by doc-0k-9o-docsviewer.googleusercontent.com.

15 / 68    (Malware)
https://doc-0k-9o-docsviewer.googleusercontent.com/viewer/securedownload/ehto6arcpp9e0h1hocd2tdiru0h2uldb/jlgejjeonbgsm2lgocmpj4r0g3mpfeh5/1397842200000/ZXhwbG9yZXI=/.../MEI0azFvejdwNDBGU1Z6a3RiakJUTWs1MFUxVQ==?sec=AHSqidaTaGcado031BOpycK7-DPgHRcWBQBFTlYBO7vr0DTYBAMCEDCm9Jz8GU1byyd0K2GDjGmN&a=dl&filename=Win8Pro.rar&rel=rar;r2;Windows 8 Pro Final Activator.exe&nonce=6vodipntniol8&user=AGZ5hq98Bno4g-cxftwBuUbuny0R&hash=bk0901ekul99kpjfeiufhqfur1e1ief1  (windows 8 pro final activator.exe)

15 / 68    (Malware)
https://doc-0k-9o-docsviewer.googleusercontent.com/viewer/securedownload/ehto6arcpp9e0h1hocd2tdiru0h2uldb/jlgejjeonbgsm2lgocmpj4r0g3mpfeh5/1397842200000/ZXhwbG9yZXI=/.../MEI0azFvejdwNDBGU1Z6a3RiakJUTWs1MFUxVQ==?a=dl&filename=Win8Pro.rar&sec=AHSqidaTaGcado031BOpycK7-DPgHRcWBQBFTlYBO7vr0DTYBAMCEDCm9Jz8GU1byyd0K2GDjGmN&rel=rar;r2;Windows 8 Pro Final Activator.exe  (windows 8 pro final activator.exe)

URL:
http://doc-0k-9o-docsviewer.googleusercontent.com/

SSL certificate subject:
CN=*.googleusercontent.com, O=Google Inc, L=Mountain View, S=California, C=US

SSL certificate issuer:
CN=Google Internet Authority G2, O=Google Inc, C=US

Web server:
sffe

blogspot.com

googleapis.com

googledrive.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.