The domain 55807193-134732981817953451.preview.editmysite.com is registered by proxy through SAFENAMES LTD and was originally registered in September of 1999. Currently this domain has been known to host various forms of malware. The hosted servers are located in San Francisco, California within the United States which resides on the Weebly, Inc. network.
Server location:
California, United States (US)
Create date:
Friday, September 10, 1999
Expires date:
Sunday, September 10, 2017
Updated date:
Monday, May 25, 2015
ASN:
AS27647 WEEBLY - Weebly, Inc.,US
Scanner detections:
Malware distribution (87% detected)
Scan engine
Details
Detections
avast!
Win32:Malware-gen, MSIL:GenMalicious-ANK [Trj], MSIL:GenMalicious-C [Trj], MSIL:Downloader-LX [Trj], MSIL:GenMalicious-ARJ [Trj]
73.33%
Kaspersky
HEUR:Trojan.Win32.Generic, Trojan.MSIL.Zapchast, Trojan.MSIL.Disfa, UDS:DangerousObject.Multi.Generic
60.00%
ESET NOD32
MSIL/Kryptik.EMQ trojan, MSIL/Kryptik.EGG trojan, MSIL/Kryptik.EOO trojan, MSIL/Kryptik.EZJ trojan, MSIL/Kryptik.FAT trojan, MSIL/Kryptik.DVI trojan
53.33%
Microsoft Security Essentials
Backdoor:MSIL/Bladabindi, Trojan:Win32/Dynamer!ac, Threat.Undefined, Backdoor:MSIL/Bladabindi.BC, Backdoor:MSIL/Bladabindi!rfn
53.33%
Emsisoft Anti-Malware
Trojan.GenericKD.2903090, Trojan.Generic.15478118, Gen:Trojan.Heur.kq0@rHBCyYkaD, Gen:Variant.Barys.9417, Trojan.GenericKD.3000924, Gen:Variant.Barys.11326
46.67%
AVG
Luhe.Fiha.T, ILCrypt, BackDoor.Generic19, Atros2
46.67%
MicroWorld eScan
Trojan.GenericKD.2903090, Trojan.Generic.15478118, Gen:Trojan.Heur.kq0@rHBCyYkaD, Gen:Variant.Barys.9417, Trojan.GenericKD.3000924, Trojan.GenericKD.2986202
40.00%
Bitdefender
Trojan.GenericKD.2903090, Trojan.Generic.15478118, Gen:Trojan.Heur.kq0@rHBCyYkaD, Gen:Variant.Barys.9417, Trojan.GenericKD.3000924
40.00%
F-Secure
Trojan.GenericKD.2903090, Trojan.Generic.15478118, Gen:Trojan.Heur.kq0@rHBCyYkaD, Gen:Variant.Barys.9417, Trojan.GenericKD.3000924
40.00%
Trend Micro
TROJ_GEN.R02KC0DL415, TROJ_GEN.R0EBC0DLN15, TROJ_GEN.R02SC0DAI16, TROJ_GEN.R0EBC0DL815, TROJ_GEN.R00JC0DAP16, TROJ_GEN.R00XC0DAC16
40.00%
Arcabit
Trojan.Generic.D2C4C32, Trojan.Generic.DEC2D66, Trojan.Heur.EDB45F, Trojan.Barys.D24C9, Trojan.Generic.D2DCA5C, Trojan.Generic.D2D90DA
40.00%
G Data
Trojan.GenericKD.2903090, Trojan.Generic.15478118, Gen:Trojan.Heur.kq0@rHBCyYkaD, Gen:Variant.Barys.9417, Trojan.GenericKD.3000924
40.00%
ESET NOD32
MSIL/Kryptik.DYD (variant), MSIL/Kryptik.EMQ (variant), MSIL/Kryptik.EPB (variant), MSIL/Kryptik.ESR (variant), MSIL/Kryptik.CBU (variant)
40.00%
Avira AntiVirus
TR/Dropper.MSIL.22082, TR/Dropper.MSIL.246721, TR/Dropper.Gen, TR/Dldr.Agent.aangvo, TR/AD.Bladabindi.Y.2455, TR/Krypt.90624.92
40.00%
Lavasoft Ad-Aware
Trojan.GenericKD.2903090, Trojan.Generic.15478118, Gen:Variant.Barys.9417, Trojan.GenericKD.3000924, Trojan.GenericKD.2986202
33.33%
The domain 55807193-134732981817953451.preview.editmysite.com has been seen to resolve to the following IP address.
designer-preview.editmysite.com
February 10, 2016
File downloads found at URLs served by 55807193-134732981817953451.preview.editmysite.com.
URL:
http://55807193-134732981817953451.preview.editmysite.com/
SSL certificate subject:
CN=*.preview.editmysite.com
SSL certificate issuer:
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US