s1.firstrowsportapp.com

WHOIS PRIVACY PROTECTION SERVICE, INC.  (Proxy Registrant)

Domain Information

The domain s1.firstrowsportapp.com is registered by proxy through ENOM, INC. and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Studio City, California within the United States which resides on the netDNA network.
Registrar:
ENOM, INC.

Server location:
California, United States (US)

Create date:
Sunday, July 22, 2012

Expires date:
Friday, July 22, 2016

Updated date:
Thursday, July 23, 2015

ASN:
AS4436 AS-NLAYER - nLayer Communications, Inc.

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CoolMirageltd.DD, PUP.Installer.TerraFirmaInternetConsulting.Z, PUP.Installer.TerraFirmaInternetConsulting.AA, PUP.CoolMirage.Installer (M), PUP.TerraFirmaInternetConsulting.Installer (M), PUP.TerraFir.Installer (M), PUP.CoolMirage (M)
100.00%

Dr.Web
Adware.Downware.579, Adware.Downware.794, Adware.Downware.751, Adware.Downware.902, Adware.Downware.547, Adware.Downware.679
36.00%

avast!
Win32:Downloader-TPG [PUP], NSIS:Oneclick-Z [PUP], Downloader-UHI [PUP]
32.00%

Avira AntiVirus
APPL/CoolMirage.Gen6, ADWARE/Adware.Gen6
30.00%

SUPERAntiSpyware
Adware.Downware, PUP.BundleInstaller, Trojan.Agent/Gen-Downloader
28.00%

VIPRE Antivirus
Iminent, Threat.4784938
26.00%

Comodo Security
Application.Win32.MCool.A, Application.Win32.Downware.G
24.00%

NANO AntiVirus
Riskware.Nsis.Downware.yrefc, Trojan.Script.Downware.cujzax, Riskware.Nsis.Downware.czyjkl
22.00%

Sophos
FT Downloader, 1 Click Downloader, PUA '1 Click Downloader' (of type Adware)
20.00%

McAfee
Artemis!F1AA061250C9, Adware-SweetIM, Artemis!8CBAC664B63C, Artemis!2389D234698C, Program.Adware-SweetIM
14.00%

ESET NOD32
Win32/Adware.1ClickDownload, Win32/Adware.Yontoo, Win32/AdWare.1ClickDownload.AT
12.00%

Malwarebytes
PUP.BundleInstaller.DW, PUP.Optional.Bandoo.A
10.00%

Trend Micro House Call
TROJ_GEN.RCBH1LP, TROJ_FAKEAV.BMC, TROJ_GEN.F47V0819, TROJ_GEN.F47V0131
10.00%

McAfee Web Gateway
Artemis!F1AA061250C9, BehavesLike.Win32.AdwareSweet.dc
10.00%

K7 Gateway Antivirus
Adware
8.00%

The domain s1.firstrowsportapp.com has been seen to resolve to the following 3 IP addresses.

January 27, 2016

August 10, 2014

December 27, 2013

File downloads found at URLs served by s1.firstrowsportapp.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

10 / 68    (Adware)

1 / 68      (Adware)

8 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

17 / 68    (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

5 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

7 / 68      (Adware)

The following 140 files have been seen to comunicate with s1.firstrowsportapp.com in live environments.

 
Latest 20 of 140 files

URL:
http://s1.firstrowsportapp.com/

Google Analytics:
UA-2249740

Title:
“Firstrowsportapp.com”

Description:
“Find Cash Advance, Debt Consolidation and more at Firstrowsportapp.com. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Firstrowsportapp.com is the site for Cash Advance.”

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

30 of 685 related domains