The domain flv2.dmrcdn.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Northern Ireland, United Kingdom (GB)
Create date:
Monday, September 28, 2015
Expires date:
Wednesday, September 28, 2016
Updated date:
Friday, March 11, 2016
Scanner detections:
Detections (95% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.PopelerSystemsl.L, PUP.Installer.PopelerSystemsl.E, PUP.Installer.PopelerSystemsl.F, PUP.Installer.EilioDevelopmentssl.J, PUP.Installer.EilioDevelopmentssl.L, PUP.Solimba.PopelerSystemsl.Installer (M), PUP.Solimba.EilioDevelopmentssl.Installer (M), PUP.Solimba.PopelerS.Installer (M), PUP.Solimba.EilioDev.Bundler (M), PUP.Solimba (M)
100.00%
Avira AntiVirus
APPL/Firseria.Gen8
85.71%
VIPRE Antivirus
Threat.4150696, Threat.4782980, Conduit
80.95%
Dr.Web
Trojan.DownLoader11.24441, Adware.Downware.5822
80.95%
avast!
Win32:Malware-gen, Win32:Trojan-gen, Win32:PUP-gen [PUP], Win32:Solimba-M [PUP], Win32:Dropper-gen [Drp]
80.95%
Vba32 AntiVirus
Downware.Morstar, Downloader.Agent
80.95%
Panda Antivirus
Trj/Genetic.gen, Trj/Chgt.I
80.95%
IKARUS anti.virus
PUA.MSIL.Solimba, AdWare.BundleApp, Trojan.Win32.Agent
80.95%
Malwarebytes
PUP.Optional.Popeler, .PUP.Optional.Solimba
76.19%
Agnitum Outpost
PUA.Solimba, PUA.Downloader
76.19%
Comodo Security
Application.Win32.Firseria.MAP, Application.Win32.Solimba.LSW
76.19%
ESET NOD32
MSIL/Solimba.AH potentially unwanted application
76.19%
K7 AntiVirus
Unwanted-Program
76.19%
Sophos
PUA.Solimba Installer, PUA 'Solimba Installer'
76.19%
AVG
BundleApp_r, Adware BundleApp_r, Adware BundleApp_r.AJ, Generic, Adware BundleApp.GZ
76.19%
The domain flv2.dmrcdn.com has been seen to resolve to the following 10 IP addresses.
ip-97-74-239-34.ip.secureserver.net
September 15, 2016
lb-182-248.above.com
June 29, 2016
unallocated.barefruit.co.uk
May 3, 2015
ec2-75-101-142-114.compute-1.amazonaws.com
December 1, 2014
ec2-54-235-219-29.compute-1.amazonaws.com
December 1, 2014
ec2-75-101-156-240.compute-1.amazonaws.com
September 5, 2014
ec2-54-197-235-95.compute-1.amazonaws.com
September 5, 2014
ec2-107-20-181-15.compute-1.amazonaws.com
August 13, 2014
ec2-107-21-119-23.compute-1.amazonaws.com
August 13, 2014
File downloads found at URLs served by flv2.dmrcdn.com.
The following 235 files have been seen to comunicate with flv2.dmrcdn.com in live environments.
URL:
http://flv2.dmrcdn.com/