flv.downg468.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain flv.downg468.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Wednesday, August 28, 2013

Expires date:
Thursday, August 28, 2014

Updated date:
Thursday, August 29, 2013

ASN:
AS16265 FIBERRING LeaseWeb B.V.,NL

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BechiroSL.O
100.00%

Malwarebytes
PUP.Optional.InstallCore
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

VIPRE Antivirus
DownloadMR
100.00%

G Data
Win32.Application.Morstar
100.00%

Vba32 AntiVirus
Downware.Morstar
100.00%

ESET NOD32
Win32/FirseriaInstaller (variant)
100.00%

Rising Antivirus
PE:Malware.FirseriaInstaller!6.17AF
100.00%

AVG
BundleApp
100.00%

The domain flv.downg468.com has been seen to resolve to the following 2 IP addresses.

dl02.lw100.1e111.net
April 14, 2014

dl01.lw100.1e111.net
April 14, 2014

File downloads found at URLs served by flv.downg468.com.

9 / 68      (Adware)

URL:
http://flv.downg468.com/

Web server:
nginx (PHP/5.4.4-14+deb7u5)