The domain gmload.net registered by Chastnoe litso was initially registered in August of 2014 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Nuremberg, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrant:
Chastnoe litso
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Bayern, Germany (DE)
Create date:
Saturday, August 23, 2014
Expires date:
Tuesday, August 23, 2016
Updated date:
Friday, August 7, 2015
ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE
Scanner detections:
Detections (95% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.iDatixCorporation.HH, PUP.OOOSoftMedia.M, PUP.iDatixCorporation.a, Threat.Win.Reputation.IMP, PUP.iDatixCorporation.X, PUP.OOOSoftM (M)
100.00%
avast!
Win32:Webalta-Y [PUP], Win32:Webalta-M [PUP], Win32:Adware-gen [Adw]
33.33%
Avira AntiVirus
ADWARE/Adware.Gen, APPL/LoadMoney.qoys, TR/Strictor.64839
33.33%
Sophos
WebAlta Toolbar, PUA 'WebAlta Toolbar' (of type Adware)
33.33%
Vba32 AntiVirus
Downware.iDatix.gen
33.33%
AVG
Could be an adware AdLoad
33.33%
Dr.Web
Adware.Webalta.675, Adware.Downware.5907, Trojan.DownLoader11.30028, Trojan.LoadMoney.362, Trojan.Packed.28612
33.33%
K7 AntiVirus
Adware
33.33%
Comodo Security
Application.Win32.Webalta.FL, Application.Win32.AgentCV.HWYF, Application.Win32.Webalta.GU, Application.Win32.Webalta.GZ
28.57%
MicroWorld eScan
Application.LoadMoney.R, Gen:Variant.Zusy.108353, Gen:Variant.Zusy.108226
28.57%
Zillya! Antivirus
Downloader.LMN.Win32.116214, Trojan.Black.Win32.19353, Downloader.LMN.Win32.130348, Trojan.Black.Win32.19637, Trojan.Black.Win32.19253
28.57%
NANO AntiVirus
Trojan.Win32.LMN.dejjnp, Trojan.Win32.LMN.dfykpx, Trojan.Win32.LMN.delyxt, Trojan.Win32.LMN.dgjnwf, Trojan.Win32.Toolbar.dghfjz
28.57%
Bitdefender
Application.LoadMoney.R, Gen:Variant.Zusy.108353, Gen:Variant.Zusy.108226, Gen:Variant.Adware.Strictor.64839
28.57%
F-Prot
W32/A-60a331ce, W32/A-2a282aa4, W32/A-dc5b6e3d, W32/A-43d29137
28.57%
G Data
Application.LoadMoney, Gen:Variant.Zusy.108353, Gen:Variant.Zusy.108226, Gen:Variant.Adware.Strictor.64839
28.57%
The domain gmload.net has been seen to resolve to the following 3 IP addresses.
static.148.166.63.178.clients.your-server.de
February 24, 2016
hosted-by.leaseweb.com
August 28, 2014
File downloads found at URLs served by gmload.net.
Web server:
nginx (PHP/5.4.16)
Related Domains