home

55074.get-wn.net

N.A.

Domain Information

The domain 55074.get-wn.net registered by N.A. was initially registered in September of 2014 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roosendaal, Noord-Brabant within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Noord-Brabant, Netherlands (NL)

Create date:
Monday, September 22, 2014

Expires date:
Thursday, September 22, 2016

Updated date:
Friday, October 30, 2015

ASN:
AS43350 NFORCE NFOrce Entertainment BV, NL

Root domain:
get-wn.net

Whois:
1 get-wn.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TIMP.STROYBIZNESPROYEKT.Bundler (M), PUP.ROSA.Installer (M), PUP (M)
100.00%

The domain 55074.get-wn.net has been seen to resolve to the following 4 IP addresses.

109.201.135.34
.
September 14, 2016

158.69.145.49
August 13, 2016

158.69.145.48
May 28, 2016

158.69.143.98
April 11, 2016

File downloads found at URLs served by 55074.get-wn.net.

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=narutosaga&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_narutosaga.exe&_lid=wdm  (setup.narutosaga.exe_71zfc.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=narutosaga&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_narutosaga.exe&_lid=wdm  (setup.narutosaga.exe_35hwr.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=narutosaga&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_narutosaga.exe&_lid=wdm  (setup.narutosaga.exe_67zyi.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=sd&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_stardoll.exe&_lid=wdm  (setup.stardoll.exe_3502k.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=sd&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_stardoll.exe&_lid=wdm  (setup.stardoll.exe_56yoz.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=sd&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_stardoll.exe&_lid=wdm  (setup.stardoll.exe_019yd.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=woozworld&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_woozworld.exe&_lid=wdm  (setup.woozworld.exe_21jnr.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=narutosaga&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_narutosaga.exe&_lid=wdm  (setup.narutosaga.exe_33rr9.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=narutosaga&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_narutosaga.exe&_lid=wdm  (setup.narutosaga.exe_55r3l.exe)

1 / 68      (Adware)
http://55074.get-wn.net/?id=ta53a&nor=1&sub=operation7&name=&url=http://gameplayer.s3.amazonaws.com/dl/.../setup_operation7.exe&_lid=wdm  (setup.operation7.exe_22och.exe)

URL:
http://55074.get-wn.net/

Title:
“get-wn.net -&nbspThis website is for sale! -&nbspget-wn Resources and Information.”

Description:
“This”

Web server:
Apache (PHP/5.3.3-7+squeeze28)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.