www.more-files.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain www.more-files.com is registered by proxy through Moniker Online Services and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Nuremberg, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
Moniker Online Services

Server location:
Bayern, Germany (DE)

Create date:
Thursday, April 03, 2014

Expires date:
Monday, April 03, 2017

Updated date:
Friday, April 08, 2016

ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE

Root domain:

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Installer.InstallPath.AA, PUP.Installer.KOMPANIYAR.g, PUP.Installer.KOMPANIYAR.EE, PUP.Installer.Wilmaonline.EE, Adware.Amonetize.Installer.Meta (M), PUP.Brightcircle (M), Adware.Amonetize (M), PUP.Amonetize.Bundler
95.56%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.Downloader
46.67%

Avira AntiVirus
ADWARE/Adware.Gen2, APPL/Amonetize.Z, Adware/Amonetize.tzv
46.67%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize, PUP/Win32.Amonetiz.R95935
46.67%

Baidu Antivirus
Adware.Win32.Amonetize
44.44%

ESET NOD32
Win32/Amonetize.AW (variant), Win32/Amonetize.AX (variant), Win32/Amonetize.BI (variant), Win32/Amonetize.BK (variant), Win32/Amonetize.BM (variant)
44.44%

AVG
BundleApp_r.R, Adware BundleApp_r.R, Generic, Generic_r
44.44%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.Amonetize
44.44%

NANO AntiVirus
Riskware.Win32.Downware.daymkg, Riskware.Win32.Amonetize.dbekwx, Riskware.Win32.Downware.dbejra, Riskware.Win32.Amonetize.dbnuug
40.00%

Antiy Labs AVL
GrayWare[AdWare:not-a-virus,HEUR]/Win32.Amonetize, Trojan/Win32.TGeneric, GrayWare[AdWare:not-a-virus]/Win32.Amonetize
40.00%

G Data
Application.Bundler.Amonetize, Adware.Generic.959515, Win32.Application.Amonetize, Gen:Variant.Application.Bundler.Amonetize.11
40.00%

McAfee Web Gateway
PUP-FBM!D753BCA1B9F2, PUP-FBM!9FF10C820203, PUP-FBM!5C416C99A5A4, Artemis!3DA32A72F2B6, PUP-Amonetize, BehavesLike.Win32.AdwareAmonetize.fh
37.78%

MicroWorld eScan
Application.Bundler.Amonetize.L, Adware.Generic.959515, Application.Bundler.Amonetize.N, Gen:Variant.Application.Bundler.Amonetize.11, Gen:Variant.Application.Bundler.Amonetize.12, Application.Bundler.Amonetize.K, Gen:Variant.Application.Bundler.Amonetize.14, Application.Generic.670720, Gen:Application.Imonetize.1
37.78%

Bitdefender
Application.Bundler.Amonetize.L, Adware.Generic.959515, Application.Bundler.Amonetize.N, Gen:Variant.Application.Bundler.Amonetize.11
37.78%

Lavasoft Ad-Aware
Application.Bundler.Amonetize.L, Adware.Generic.959515, Application.Bundler.Amonetize.N, Gen:Variant.Application.Bundler.Amonetize.11
37.78%

The domain www.more-files.com has been seen to resolve to the following 26 IP addresses.

ns7.expirationwarning.net
May 15, 2016

ns3.expirationwarning.net
May 14, 2016

static.130.1.76.144.clients.your-server.de
April 8, 2016

static.242.0.76.144.clients.your-server.de
April 8, 2016

ec2-54-244-122-70.us-west-2.compute.amazonaws.com
February 16, 2016

ec2-54-245-89-116.us-west-2.compute.amazonaws.com
February 14, 2016

ec2-54-244-231-205.us-west-2.compute.amazonaws.com
January 29, 2016

ec2-54-245-87-78.us-west-2.compute.amazonaws.com
January 27, 2016

ec2-54-245-91-20.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-54-244-233-188.us-west-2.compute.amazonaws.com
December 1, 2015

ec2-54-245-230-227.us-west-2.compute.amazonaws.com
October 29, 2015

ec2-54-244-126-236.us-west-2.compute.amazonaws.com
October 29, 2015

ec2-54-244-112-122.us-west-2.compute.amazonaws.com
October 12, 2015

ec2-54-245-120-101.us-west-2.compute.amazonaws.com
August 11, 2015

ec2-54-244-90-176.us-west-2.compute.amazonaws.com
May 3, 2015

ec2-54-245-242-253.us-west-2.compute.amazonaws.com
May 3, 2015

ec2-54-245-104-86.us-west-2.compute.amazonaws.com
September 30, 2014

ec2-54-214-33-160.us-west-2.compute.amazonaws.com
September 30, 2014

ec2-54-214-247-254.us-west-2.compute.amazonaws.com
August 1, 2014

ec2-54-214-6-146.us-west-2.compute.amazonaws.com
August 1, 2014

ec2-54-214-36-52.us-west-2.compute.amazonaws.com
June 20, 2014

ec2-54-244-240-213.us-west-2.compute.amazonaws.com
June 13, 2014

ec2-54-203-247-123.us-west-2.compute.amazonaws.com
June 13, 2014

ec2-54-214-239-112.us-west-2.compute.amazonaws.com
June 13, 2014

ec2-54-214-5-255.us-west-2.compute.amazonaws.com
May 7, 2014

ec2-54-244-225-147.us-west-2.compute.amazonaws.com
May 1, 2014

File downloads found at URLs served by www.more-files.com.

 
Latest 30 of 2,010 download URLs

The following 25 files have been seen to comunicate with www.more-files.com in live environments.

 
Latest 20 of 33 files

URL:
http://www.more-files.com/

Google Analytics:
UA-76243115

Title:
“ERRP | Expired Registration Recovery Policy”

Description:
“Expired Registration Recovery Policy”

Web server:
nginx/1.4.6 (Ubuntu) (PHP/5.5.9-1ubuntu4.14)