home

901014.fullversiondownload.website

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
fullversiondownload.website

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Gen:Variant.Graftor.275998
100.00%

Dr.Web
Trojan.Amonetize.12913
100.00%

Reason Heuristics
PUP.Amonetize.DevelopI (M)
100.00%

ESET NOD32
Win32/Amonetize.SR potentially unwanted application
100.00%

F-Secure
Variant.Graftor.275998
100.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
100.00%

Norman
Gen:Variant.Graftor.275998
100.00%

The domain 901014.fullversiondownload.website has been seen to resolve to the following IP address.

91.121.100.15
ns3013662.ip-91-121-100.eu
May 22, 2016

File downloads found at URLs served by 901014.fullversiondownload.website.

7 / 68      (PUP)
http://901014.fullversiondownload.website/download11.php?x=9f701282608f496a79c091a4917880eb&id=Wnnsowski&title=ShakesandFidgetGenerator32  (shakesandfidgetgenerator32__7934_il30452.exe)

The following file have been seen to comunicate with 901014.fullversiondownload.website in live environments.

TCP » 91.121.100.15:80
citrio.exe (Citrio by CatalinaGroup)

1freesoftwaredownload1.eu

1freesoftwareonline.com

1freesoftwareonline1.com

allhotdownload.online

download1234.website

download3333.club

download4444.club

superfastdownload000.site

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.