home

mymediadownloadseighteen.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain mymediadownloadseighteen.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in September of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Saturday, September 5, 2015

Expires date:
Monday, September 5, 2016

Updated date:
Saturday, September 5, 2015

ASN:
AS60781 LEASEWEB-NL LeaseWeb B.V.,NL

Whois:
1 mymediadownloadseighteen.com record

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize (M), Threat.Win.Reputation.IMP
100.00%

AVG
Downloader, Generic, Adload
87.50%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.LoadMoney
75.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, not-a-virus:Downloader.Win32.Agent
75.00%

ESET NOD32
Win32/Amonetize.II potentially unwanted (variant), Win32/Amonetize.JR potentially unwanted (variant), Win32/Amonetize.JW potentially unwanted (variant), Win32/Amonetize.KC potentially unwanted (variant)
75.00%

Panda Antivirus
Generic Suspicious, Trj/Genetic.gen
75.00%

VIPRE Antivirus
Amonetize, Threat.4120919
62.50%

Avira AntiVirus
ADWARE/Amonetize.Gen, W32/Virut.Gen, ADWARE/Amonetize.Gen7, TR/Dropper.Gen
62.50%

AhnLab V3 Security
PUP/Win32.Amonetize, PUP/Win32.Generic
62.50%

Baidu Antivirus
PUA.Win32.Amonetize, Hacktool.Win32.Agent
62.50%

K7 AntiVirus
Unwanted-Program
50.00%

NANO AntiVirus
Riskware.Win32.Amonetize.dxghhg, Trojan.Win32.Agent.dxmgor
50.00%

Vba32 AntiVirus
SScope.Downware.Amonetize, Signed-Downware.Amonetize
50.00%

Rising Antivirus
PE:Malware.RDM.15!5.15[F1]
50.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A, Threat.Undefined
37.50%

The domain mymediadownloadseighteen.com has been seen to resolve to the following IP address.

95.211.148.47
October 13, 2015

File downloads found at URLs served by mymediadownloadseighteen.com.

2 / 68      (false positives)
http://mymediadownloadseighteen.com/?dmVyc2lvbj0xLjEuNS4yNiZjYW1waWQ9MzY4NyZpbnN0aWRbYXBwbmFtZV09SGFsbG93ZWVuJTIwVHJpdmlhJTIwUXVlc3Rpb25zJTIwQW5kJTIwQW5zd2VycyUyMFByaW50YWJsZXMlMjBEb3dubG9hZGVyJmluc3RpZFthcHBzZXR1cHVybF09aHR0cCUzQSUyRiUyRmZhc3RtZWRpYWRvd25sb2Fkcy5jb20lMkZkb3dubG9hZCUyRlByb21wdC1Eb3dubG9hZGVyLTE2MDI0NDA4MDguZXhlJmluc3RpZFtjbWRsaW5lXT0maW5zdGlkW2FwcGltYWdldXJsXT1odHRwJTNBJTJGJTJGcHJvbXB0ZG93bmxvYWRlci5jb20lMkZsb2dvLnBuZyZwcmVmaXg9SGFsbG93ZWVuJTIwVHJpdmlhJTIwUXVlc3Rpb25zJTIwQW5kJTIwRG93bmxvYWRlciZpbnN0aWRbaW50ZXJydXB0ZWRdPWh0dHAlM0ElMkYlMkZwcm9tcHRkb3dubG9hZGVyLmNvbSUyRiUzRmNhbmNlbCZ0aTE9MTYwMjQ0MDgwOCZpbnN0aWRbdGhhbmt5b3VwYWdlXT1odHRwJTNBJTJGJTJGcHJvbXB0ZG93bmxvYWRlci5jb20lMkYlM0ZzdWNjZXNzJnRrbj0xNDQ0NzU4NDYzLjg4YTRmMzdmMWFlNzBhYWQ3MGY1OTEzZWVkNDEzNjYy  (wrar420.exe)

6 / 68      (Adware)
http://mymediadownloadseighteen.com/?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  (1st primary audio files education4iq (h.k.).rar__15047_i1707095447_il543448.exe)

15 / 68    (Adware)
http://mymediadownloadseighteen.com/?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  (rar password unlocker 3 0 downloader__3687_i1678287657_il2552587.exe)

20 / 68    (Adware)
http://mymediadownloadseighteen.com/?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  (icloud removal activation tool downloader__3687_i1700138012_il1551207.exe)

10 / 68    (Adware)
http://mymediadownloadseighteen.com/?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  (windows.8.1.rtm.lisanslama...aktivasyon.resimli.anlatim__7816_i1710215209_il44028.exe)

11 / 68    (Adware)
http://mymediadownloadseighteen.com/?dmVyc2lvbj0xLjEuNS4yNiZjYW1waWQ9MzY4NyZpbnN0aWRbYXBwbmFtZV09UmFzY2FsJTIwMjBWaWRlbyUyMDIwT3JhbCUyMDIwRXhhbXMlMjAyMENoaSUyMDIwQ2hpJTIwMjBMYXJ1ZSUyMCUyMERvd25sb2FkZXImaW5zdGlkW2FwcHNldHVwdXJsXT1odHRwJTNBJTJGJTJGZmFzdG1lZGlhZG93bmxvYWRzLmNvbSUyRmRvd25sb2FkJTJGUHJvbXB0LURvd25sb2FkZXItMTgzMzc4NjYwMy5leGUmaW5zdGlkW2NtZGxpbmVdPSZpbnN0aWRbYXBwaW1hZ2V1cmxdPWh0dHAlM0ElMkYlMkZwcm9tcHRkb3dubG9hZGVyLmNvbSUyRmxvZ28ucG5nJnByZWZpeD1SYXNjYWwlMjAyMFZpZGVvJTIwMjBPcmFsJTIwMjBFeGFtcyUyMCUyMERvd25sb2FkZXImaW5zdGlkW2ludGVycnVwdGVkXT1odHRwJTNBJTJGJTJGcHJvbXB0ZG93bmxvYWRlci5jb20lMkYlM0ZjYW5jZWwmdGkxPTE4MzM3ODY2MDMmaW5zdGlkW3RoYW5reW91cGFnZV09aHR0cCUzQSUyRiUyRnByb21wdGRvd25sb2FkZXIuY29tJTJGJTNGc3VjY2VzcyZ0a249MTQ0NTI5MTE1OC5kMWRlNmViNzA2Zjc3ODQwYzE1YWYyOGRmODA5N2VmYQ==  ({blocked}.exe)

19 / 68    (Adware)
http://mymediadownloadseighteen.com/?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  (gta extreme indonesia full mod v6 terbaru__6629_i1711093775_il8105.exe)

10 / 68    (PUP)
http://mymediadownloadseighteen.com/?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  (marvel contest of champions ha downloader__3687_i1689185098_il1945878.exe)

URL:
http://mymediadownloadseighteen.com/

Title:
“Download Genius — Select the server for direct downloading”

Web server:
nginx/1.0.15

dwnldsnwtw.com

fastmediadownloads.com

mybestmediadownloadsnow.com

mymediadownloadsefourteen.com

mymediadownloadsfourtyone.com

mymediadownloadsfourtythree.com

mymediadownloadsfourtytwo.com

mymediadownloadsnine.com

mymediadownloadsnineteen.com

mymediadownloadsnow.com

mymediadownloadsthirtyfive.com

mymediadownloadsthirtyfour.com

mymediadownloadsthirtyseven.com

mymediadownloadsthirtysix.com

mymediadownloadsthirtytwo.com

mymediadownloadstwentyfive.com

mymediadownloadstwentyone.com

mymediadownloadstwentyseven.com

mymediadownloadstwo.com

mynewmediadownloads.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.