s1.lshuntertvapp.com

WHOIS PRIVACY PROTECTION SERVICE, INC.  (Proxy Registrant)

Domain Information

The domain s1.lshuntertvapp.com is registered by proxy through ENOM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Studio City, California within the United States which resides on the netDNA network.
Registrar:
ENOM, INC.

Server location:
California, United States (US)

Create date:
Thursday, September 13, 2012

Expires date:
Tuesday, September 13, 2016

Updated date:
Tuesday, January 12, 2016

ASN:
AS4436 AS-NLAYER - nLayer Communications, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CoolMirageltd.AA, PUP.Installer.CoolMirageltd.Z, PUP.Installer.TerraFirmaInternetConsulting.AA, Threat.CoolMirage.Installer, PUP.CoolMirage.Installer (M), PUP.TerraFir.Installer (M)
100.00%

avast!
Win32:Downloader-TPG [PUP], NSIS:Oneclick-Z [PUP]
40.00%

Dr.Web
Adware.Downware.902, Adware.Downware.861
40.00%

Trend Micro House Call
TROJ_GEN.F47V0421, TROJ_GEN.F47V0424, TROJ_GEN.F47V0202, TROJ_GEN.F47V0219
26.67%

Comodo Security
Application.Win32.MCool.A, Application.Win32.Downware.G
26.67%

VIPRE Antivirus
Iminent
26.67%

Avira AntiVirus
APPL/CoolMirage.aet, APPL/Yellow.NB, ADWARE/Adware.Gen6
26.67%

Sophos
FT Downloader, 1 Click Downloader
20.00%

McAfee
Artemis!080234826630, Artemis!E7A54C3249DD
13.33%

ESET NOD32
Win32/Adware.1ClickDownload.AM
13.33%

NANO AntiVirus
Trojan.Script.Downware.cujzax, Riskware.Nsis.Downware.yrefc
13.33%

SUPERAntiSpyware
PUP.BundleInstaller
13.33%

Qihoo 360 Security
Win32/Virus.Adware.4ab
6.67%

The domain s1.lshuntertvapp.com has been seen to resolve to the following 2 IP addresses.

March 2, 2016

April 13, 2014

File downloads found at URLs served by s1.lshuntertvapp.com.

2 / 68      (Adware)

7 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

11 / 68    (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

5 / 68      (Adware)

9 / 68      (Adware)

10 / 68    (Adware)

The following 3 files have been seen to comunicate with s1.lshuntertvapp.com in live environments.

URL:
http://s1.lshuntertvapp.com/

Google Analytics:
UA-2249740

Title:
“Lshuntertvapp.com”

Description:
“Find Cash Advance, Debt Consolidation and more at Lshuntertvapp.com. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Lshuntertvapp.com is the site for Cash Advance.”

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

30 of 685 related domains