www.xflv-player.com

Whois Privacy Corp.

Domain Information

The domain www.xflv-player.com registered by Whois Privacy Corp. was initially registered in October of 2014 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Francisco, California within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Northern California) region datacenter.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
California, United States (US)

Create date:
Friday, October 31, 2014

Expires date:
Saturday, October 31, 2015

Updated date:
Friday, October 31, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

AVG
Rungnapa, Generic
83.33%

Reason Heuristics
PUP.RungnapaFongkerd.Q, PUP.SarinratSubindee.Q, PUP.VASSANAKONGSOONGNERN.Q, PUP.CoolMirage
83.33%

Dr.Web
Adware.Downware.6586, Adware.Downware.8319, Adware.Yontoo.54
66.67%

VIPRE Antivirus
CoolMirage Ltd
66.67%

Sophos
FT Downloader, Generic PUA NP, CoolMirage
50.00%

K7 AntiVirus
Adware
50.00%

Trend Micro House Call
Suspicious_GEN.F47V1227, Suspicious_GEN.F47V0130, Suspici.EDD0D2A5
50.00%

Kaspersky
not-a-virus:AdWare.NSIS.Yontoo, not-a-virus:Downloader.Win32.TornTV
50.00%

G Data
NSIS.Application.Adload
50.00%

Baidu Antivirus
Adware.NSIS.Yontoo, Hacktool.Win32.TornTV
50.00%

ESET NOD32
NSIS/TrojanDownloader.Adload.AA, NSIS/TrojanDropper.Agent.CB
33.33%

Panda Antivirus
Generic Suspicious
33.33%

AhnLab V3 Security
Win-PUP/CrossRider
33.33%

McAfee
Artemis!9B3CEFC2E544, Artemis!E5BC53DD0865
33.33%

Qihoo 360 Security
Win32/Virus.Downloader.e28
16.67%

The domain www.xflv-player.com has been seen to resolve to the following 2 IP addresses.

ec2-50-18-191-221.us-west-1.compute.amazonaws.com
November 2, 2014

ec2-184-169-153-77.us-west-1.compute.amazonaws.com
November 2, 2014

File downloads found at URLs served by www.xflv-player.com.

1 / 68      (inconclusive)

12 / 68    (Adware)

 
Latest 30 of 134 download URLs

URL:
http://www.xflv-player.com/

Google Analytics:
UA-37828094

Title:
“HDVid - The best streaming expirience”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.20 (Ubuntu) (PHP/5.3.6-13ubuntu3.9)