home

tanfolder.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain tanfolder.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Monday, September 29, 2014

Expires date:
Thursday, September 29, 2016

Updated date:
Sunday, October 4, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Whois:
2 tanfolder.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ContumarEmpresarialSL.M, PUP.Solimba, PUP.Solimba.ContumarEmpresarial, PUP.Solimba.ContumarEmpresarial (M), PUP.Solimba.Contumar (M), PUP.Solimba.Contumar.Bundler (M), PUP.InstallCore.AC.Installer (M), PUP.Solimba (M)
100.00%

Emsisoft Anti-Malware
Application.Generic.1004353, Application.Bundler.Morstar
12.12%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
9.09%

VIPRE Antivirus
Threat.4758821, Threat.4150696
9.09%

AVG
Adware BundleApp_r.AJ
9.09%

Sophos
PUA 'Solimba Installer'
9.09%

Malwarebytes
PUP.Optional.Solimba
9.09%

Norman
Application.Generic.1004353, Solimba.ZMLU
9.09%

NANO AntiVirus
Riskware.Win32.Downware.djsrhf
9.09%

Avira AntiVirus
APPL/Firseria.Gen, TR/Trash.Gen, PUA/Firseria.Gen
9.09%

G Data
Win32.Application.Morstar, Application.Bundler.Morstar
9.09%

AhnLab V3 Security
PUP/Win32.Solimba
9.09%

Vba32 AntiVirus
Downware.Morstar
9.09%

IKARUS anti.virus
not-a-virus:Downloader.Morstar, PUA.MSIL.Solimba
9.09%

Panda Antivirus
Trj/Genetic.gen
9.09%

The domain tanfolder.com has been seen to resolve to the following 5 IP addresses.

50.63.202.33
ip-50-63-202-33.ip.secureserver.net
October 29, 2015

23.21.184.132
ec2-23-21-184-132.compute-1.amazonaws.com
June 18, 2015

54.225.127.99
ec2-54-225-127-99.compute-1.amazonaws.com
June 18, 2015

54.243.233.95
ec2-54-243-233-95.compute-1.amazonaws.com
January 12, 2015

50.17.180.253
ec2-50-17-180-253.compute-1.amazonaws.com
January 12, 2015

File downloads found at URLs served by tanfolder.com.

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../imo free video calls and chat for PC.exe  (565cb91d9372fae0d392cb1b078f1e48)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Imo Free Video Calls and Chat for PC Windows.exe  (a690bcd2a64b88175465f0f0e5d3c39e)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Picsart.exe  (31b0a243a35a7d030b69ddd67b2a2c4a)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Five Nights at Freddy’s for PC.exe  (bec47474f1b4c2d231abb22fc38e27a1)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../WhatsApp.exe  (2d0b64162da9ad6cb06895a1bf69d04a)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Videoder for PC.exe  (a9a2e6232a5e4a8a1842b6662c4c4b3a)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Ben 10 Alien Force.exe  (965ee9e3217cac04614f1de78f01c27b)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Whats App PC.exe  (5eab5e608d2a3bc394136d86d6f7ca0f)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Odin3.exe  (e1b147d64cdd60bac75144070ba366dc)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../uTorrent.exe  (9aea2402f4a23d59ad2980e0852b87e5)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../GUNSHIP BATTLE : Helicopter 3D for PC.exe  (gunship battle - helicopter 3d for pc.exe)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../PhotoFunia for PC.exe  (5b20b4ae5ea91da946b7d8473a395e67)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Hay Day for PC.exe  (94e1cf762fc70ad6242f166e55cbc353)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Hay Day.exe  (ca7a4e82adb2217311f15b93a55a5b89)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Xender for PC.exe  (be02100c72035160a7a0e72cec79b3d0)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../SHAREit for PC Windows.exe  (b83ec66690b65c13483b6b1eea14f95a)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Showbox Installer.exe  (7a0d9c6e31225c4e8a3d52eb9c5a534c)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Exploration Lite para PC.exe  (12e4191e1375ff1ed682b4d3ae06bb28)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../9 apps: Best Choice App Store for PC.exe  (9 apps- best choice app store for pc.exe)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../PowerAMC.exe  (0a53c8295231722e2a8983280193781f)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Microsoft Office Outlook 2007.exe  (799f7590bcae4f0d9a51e511d0642c2e)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../UC Browser.exe  (64366d7a22e9c379029e0948e541d527)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Street Legal Racing: Redline.exe  (street legal racing- redline.exe)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Snapseed.exe  (39f7e227e8dd2629299d2d71a4a03e05)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Express Files.exe  (a0ade209c73a7395f0cf5a9e767f682e)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Retrica for PC.exe  (002461452cf14937eb8d9744dada4bd3)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Summoners War: Sky Arena for PC.exe  (summoners war- sky arena for pc.exe)

1 / 68      (Adware)
http://tanfolder.com/n/3.2.46/.../Fun Run Multiplayer Race for PC.exe  (e0615d43c15ff75f9a2eb38e591fff69)

32 / 68    (Adware)
http://tanfolder.com/n/3.2.46/.../FaceTime.exe  (ddc3f9296a92e888ef11f5abc1d15e19)

30 / 68    (Adware)
http://tanfolder.com/n/3.2.46/.../Super Mario Land.exe  (ca1e9b5c3338b9d4b384335e335a7855)

 
Latest 30 of 33 download URLs

The following 160 files have been seen to comunicate with tanfolder.com in live environments.

TCP » 50.63.202.33:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 50.63.202.33:80
smartsaver+ 12.2-codedownloader.exe (SmartSaver+ 12.2 by smarts)

TCP » 50.63.202.33:80
thetorntv v10-codedownloader.exe (TheTorntv V10 by esc)

TCP » 50.63.202.33:80
36316498-b3d9-47dd-98ae-f60936fb007c-5.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
07050b38-1064-4757-a89c-fb7383a998f7-2.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
dd1f5be3-e05a-4fa9-91f1-ad3b9f7ec51a-4.exe (SmartSaver+ 12.2 by smarts)

TCP » 50.63.202.33:80
36316498-b3d9-47dd-98ae-f60936fb007c-4.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
apps hat-codedownloader.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
36316498-b3d9-47dd-98ae-f60936fb007c-11.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
07050b38-1064-4757-a89c-fb7383a998f7-11.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
cb4bae9c-01f4-4a6c-b74b-9a4c0c95cbf4-5.exe (iWebar)

TCP » 50.63.202.33:80
07050b38-1064-4757-a89c-fb7383a998f7-4.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
apps hat-codedownloader.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
btosqf.exe (Object Browser)

TCP » 50.63.202.33:80
f949597b-6d96-468b-bbb9-62a2c4a9dc41-7.exe (HDtubeV1.6 by HDTube)

TCP » 50.63.202.33:80
video-high-bg.exe (video-high by videohq)

TCP » 50.63.202.33:80
object browser-codedownloader.exe (Object Browser)

TCP » 50.63.202.33:80
cinema-plus-1.7cv06.10-codedownloader.exe (Cinema-Plus-1.7cV06.10 by Cinema PlusV06.10)

TCP » 50.63.202.33:80
36316498-b3d9-47dd-98ae-f60936fb007c-6.exe (Apps Hat by Nero)

TCP » 50.63.202.33:80
pdfu.exe (Object Browser)

 
Latest 20 of 161 files

URL:
http://tanfolder.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.