fileplenty.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain fileplenty.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Steele, Nordrhein-Westfalen within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Nordrhein-Westfalen, Germany (DE)

Create date:
Wednesday, July 3, 2013

Expires date:
Sunday, July 3, 2016

Updated date:
Saturday, July 4, 2015

ASN:
AS25074 INETBONE-AS MESH GmbH

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Somoto.g, PUP.SITEONSPOT.EE, PUP.Somoto.l, PUP.SITEONSPOT.I, PUP.Somoto.EE, PUP.Somoto.i, PUP.Somoto.DD, PUP.Somoto.p, PUP.Somoto.Bundler (M), Adware.Somoto.Installer.Meta (M), PUP.Somoto.SITEONSP.Bundler (M), PUP.Somoto.SiteonSp.Bundler (M), PUP.Somoto (M), Adware.Somoto (M)
95.74%

Baidu Antivirus
Adware.Win32.Somoto, Adware.Win32.Agent
36.17%

NANO AntiVirus
Riskware.Nsis.Adware.dbnhrj, Riskware.Win32.Downware.digcac
34.04%

Clam AntiVirus
Win.Adware.Somoto
34.04%

AVG
Generic, AdLoad.R
34.04%

VIPRE Antivirus
Threat.4150696, BetterInstaller, Trojan.Win32.Generic
31.91%

Sophos
Generic PUA DE, Somoto BetterInstaller, PUA 'Somoto BetterInstaller', Generic PUA HM
31.91%

Kaspersky
not-a-virus:AdWare.Win32.Agent, not-a-virus:Downloader.Win32.Agent
29.79%

Qihoo 360 Security
HEUR/Malware.QVM06.Gen, Win32/Application.6bb, HEUR/QVM42.0.Malware.Gen, Win32/Virus.Downloader.192
29.79%

SUPERAntiSpyware
PUP.Somoto/Variant
27.66%

Avira AntiVirus
APPL/Somoto.Gen2, APPL/Somoto.hzis
27.66%

ESET NOD32
Win32/Somoto, Win32/Somoto.G potentially unwanted
27.66%

Dr.Web
Trojan.Packed.26824, Trojan.Packed.28357, Threat.Undefined
25.53%

Emsisoft Anti-Malware
Application.Bundler.Somoto
23.40%

MicroWorld eScan
Application.Bundler.Somoto.J
23.40%

The domain fileplenty.com has been seen to resolve to the following IP address.

July 3, 2014

File downloads found at URLs served by fileplenty.com.

1 / 68      (PUP)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

27 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-Nf6P7VW3G.exe  (flvplayer_downloader-n9gb1254k.exe)

27 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-NekIz93ym.exe  (flvplayer_downloader-nbqrvy269.exe)

19 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-N5ob6aKsf.exe  (flvplayer_downloader-n2o7ur5g6.exe)

19 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-NbgSbjO6o.exe  (flvplayer_downloader-n6rjqf4pk.exe)

1 / 68      (Adware)

1 / 68      (Adware)

24 / 68    (Adware)
http://fileplenty.com/.../HDPLAYER_downloader-N7xiYWGDc.exe  (flvplayer_downloader-n6ku3nk7p.exe)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

21 / 68    (Adware)

12 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-NbyLRfhzx.exe  (filedownloadedsuccessfully_downloader-n295rn8sp.exe)

1 / 68      (Adware)

1 / 68      (Adware)

12 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-N1WgZ2E0Q.exe  (filedownloadedsuccessfully_downloader-n295rn8sp.exe)

16 / 68    (Adware)
http://fileplenty.com/.../FLVPlayer_downloader-NdQwfCJAM.exe  (download-freakshare_downloader-icb6rpo1f.exe)

16 / 68    (Adware)

1 / 68      (PUP)
http://fileplenty.com/.../FileDownloaded20Successfully_downloader-N2B14kjmE.exe  (filedownloaded20successfully_downloader-nexi9fqou.exe)

 
Latest 30 of 265 download URLs

URL:
http://fileplenty.com/

Web server:
nginx