The domain healthcaregovtool.com registered by Moniker Online Services LLC (Domain Holding) was initially registered in January of 2014 through Moniker Online Services. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Nuremberg, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrant:
Moniker Online Services LLC (Domain Holding)
Registrar:
Moniker Online Services
Server location:
Bayern, Germany (DE)
Create date:
Monday, January 6, 2014
Expires date:
Friday, January 6, 2017
Updated date:
Thursday, March 3, 2016
ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE
Google Safe Browsing:
unwanted
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Dr.Web
Adware.Superfish.160, Adware.Superfish.217, Adware.Superfish.227, Adware.Superfish.241, Threat.Undefined
66.67%
Reason Heuristics
PUP.P4hostcom.Installer (M), PUP.APPsoluteTechnology.Installer (M), PUP.Superfish.Essync.Installer.Meta (M)
66.67%
Bkav FE
W32.HfsAdware
44.44%
avast!
Win32:Evo-gen [Susp], Win32:Adware-gen [Adw]
44.44%
Avira AntiVirus
ADWARE/Graftor.405000, TR/Dropper.A.12793, ADWARE/Adware.Gen, TR/Dropper.A.15172
44.44%
IKARUS anti.virus
Win32.SuspectCrc, Trojan.Dropper, PUA.Komodia
44.44%
Malwarebytes
Rootkit.WeWatcher.PUP, PUP.Optional.BundleInstaller, PUP.Optional.Komodia
44.44%
Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen, HEUR/QVM30.1.Malware.Gen
33.33%
Kaspersky
HEUR:Trojan-Downloader.Win32.Generic
22.22%
VIPRE Antivirus
APPsoluteTechnology, Threat.4150696
22.22%
McAfee
Artemis!9E53194158B5, Trojan.Artemis!3569C8A59F82
22.22%
Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
22.22%
Rising Antivirus
PE:Malware.RDM.24!5.1E[F1], PE:Malware.Generic/QRS!1.9E2D [F]
22.22%
MicroWorld eScan
Gen:Variant.Adware.Graftor.186320
11.11%
The domain healthcaregovtool.com has been seen to resolve to the following 3 IP addresses.
static.130.1.76.144.clients.your-server.de
April 15, 2016
static.242.0.76.144.clients.your-server.de
April 15, 2016
File downloads found at URLs served by healthcaregovtool.com.
The following 18 files have been seen to comunicate with healthcaregovtool.com in live environments.
URL:
http://healthcaregovtool.com/
Google Analytics:
UA-43967021
Title:
“healthcaregovtool.com”
Web server:
nginx (PHP/5.3.10-1ubuntu3.21)
Related Domains