home

14load.rloadload.com

Chastnoe litso

Domain Information

The domain 14load.rloadload.com registered by Chastnoe litso was initially registered in November of 2013 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Friday, November 29, 2013

Expires date:
Saturday, November 29, 2014

Updated date:
Wednesday, September 24, 2014

ASN:
AS16265 FIBERRING LeaseWeb B.V.,NL

Root domain:
rloadload.com

Whois:
1 rloadload.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OOOSoftMedia.V
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

avast!
Win32:Webalta-M [PUP]
100.00%

Dr.Web
Adware.Downware.5907
100.00%

McAfee
PUP-FPY, Program.PUP-FPY
100.00%

Kaspersky
not-a-virus:HEUR:Downloader.Win32.LMN
100.00%

NANO AntiVirus
Trojan.Win32.LMN.dfjlfo
100.00%

Sophos
WebAlta Toolbar, PUA 'WebAlta Toolbar' (of type Adware)
100.00%

Comodo Security
Application.Win32.Webalta.GU
100.00%

Avira AntiVirus
APPL/LoadMoney.qoys, Adware/Webalta.qoys
100.00%

Vba32 AntiVirus
Downware.iDatix.gen
100.00%

AVG
Could be an adware AdLoad, Adware Generic5.BTVT
100.00%

ESET NOD32
Win32/AdWare.Toolbar.Webalta.GW
50.00%

Emsisoft Anti-Malware
Adware.Agent.OZU
50.00%

ESET NOD32
Win32/AdWare.Toolbar.Webalta.GW application
50.00%

The domain 14load.rloadload.com has been seen to resolve to the following IP address.

5.79.80.72
September 28, 2014

File downloads found at URLs served by 14load.rloadload.com.

29 / 68    (Adware)
http://14load.rloadload.com/mload.php?param3=1&ic=1&param2=MjQ3OTY0NF85M181OTI=&d=MjQ3OTY0NA==&name=RGlyZWN0WF85LjBjXzI0Nzk2NDRfNTky  (directx_9.0c.exe)

13 / 68    (Adware)
http://14load.rloadload.com/mload.php?ic=10&param2=MjM1ODA1OV85M18xNzU=&d=MjM1ODA1OQ==&name=aGVyZFByb3RlY3QgMS4wLjMuOSBiZXRhIF8yMzU4MDU5XzE3NQ==  (herdprotect 1.0.3.9 beta.exe)

URL:
http://14load.rloadload.com/

Web server:
nginx/1.0.15

my2load.net

my2load.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.