dll513.your-fd.net

Whois Privacy Corp.

Domain Information

The domain dll513.your-fd.net registered by Whois Privacy Corp. was initially registered in April of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Salt Lake City, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
Utah, United States (US)

Create date:
Monday, April 6, 2015

Expires date:
Wednesday, April 6, 2016

Updated date:
Monday, April 6, 2015

ASN:
AS29854 WESTHOST - WestHost, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Gen:Variant.Kazy.589566
100.00%

Bitdefender
Gen:Variant.Kazy.589566
100.00%

Lavasoft Ad-Aware
Gen:Variant.Kazy.589566
100.00%

Emsisoft Anti-Malware
Gen:Variant.Kazy.589566
100.00%

F-Secure
Gen:Variant.Kazy.589566
100.00%

Dr.Web
Adware.Downware.10806
100.00%

G Data
Gen:Variant.Kazy.589566
100.00%

AhnLab V3 Security
PUP/Win32.Downloader
100.00%

ESET NOD32
Win32/ExpressDownloader.K potentially unwanted (variant)
100.00%

Reason Heuristics
PUP.Bundler.Via Advertising, Threat.Bundler.Via Advertising
100.00%

herdProtect (fuzzy)
a variant of 44fd382fab8b2c90a15071e390fd8b48165568e3, a variant of 8bc11320bddb8b4b7d4d527bf520ab665977281b
100.00%

NANO AntiVirus
Trojan.Win32.Agent.dqimma
50.00%

Trend Micro House Call
TROJ_GEN.R021C0EDD15
50.00%

avast!
Win32:Adware-gen [Adw]
50.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
50.00%

The domain dll513.your-fd.net has been seen to resolve to the following IP address.

199.195.196.180.static.midphase.com
February 23, 2016

File downloads found at URLs served by dll513.your-fd.net.

The following 19 files have been seen to comunicate with dll513.your-fd.net in live environments.

URL:
http://dll513.your-fd.net/

Title:
“SmileFiles”

Web server:
nginx/1.2.1 (PHP/5.3.3-7+squeeze19)