downprov.red-3-small-button.com

Whois Privacy Corp.

Domain Information

The domain downprov.red-3-small-button.com registered by Whois Privacy Corp. was initially registered in February of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
Dublin City, Ireland (IE)

Create date:
Wednesday, February 4, 2015

Expires date:
Saturday, February 4, 2017

Updated date:
Friday, February 5, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), Adware.Amonetize.Meta (M), Adware.Amonetize (M)
97.83%

ESET NOD32
Win32/Injector.BOOH trojan
2.17%

Emsisoft Anti-Malware
Gen:Variant.Kazy.311754
2.17%

avast!
Win32:Dropper-gen [Drp]
2.17%

Norman
Gen:Variant.Kazy.311754
2.17%

Kaspersky
Trojan.Win32.Inject
2.17%

The domain downprov.red-3-small-button.com has been seen to resolve to the following 4 IP addresses.

May 16, 2016

ns1.ibspark.com
February 6, 2016

July 15, 2015

July 15, 2015

File downloads found at URLs served by downprov.red-3-small-button.com.

 
Latest 30 of 246 download URLs

The following 144 files have been seen to comunicate with downprov.red-3-small-button.com in live environments.

 
Latest 20 of 165 files

URL:
http://downprov.red-3-small-button.com/

Google Analytics:
UA-48689684

Title:
“red-3-small-button.com”

Web server:
nginx

30 of 618 related domains