home

dmwjsc.com

Pham Tran Tho

Domain Information

The domain dmwjsc.com registered by Pham Tran Tho was initially registered in April of 2014 through GODADDY.COM, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Tuesday, April 29, 2014

Expires date:
Saturday, April 29, 2017

Updated date:
Wednesday, May 11, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Whois:
1 dmwjsc.com record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Dr.Web
Win32.Sector.30
100.00%

Emsisoft Anti-Malware
Win32.Sality
100.00%

avast!
Win32:SaliCode
100.00%

F-Secure
Win32.Sality.3
100.00%

F-Prot
W32/Sality.gen2
100.00%

Microsoft Security Essentials
Threat.Undefined
100.00%

McAfee
Virus.W32/Sality.gen.z
100.00%

ESET NOD32
Win32/Sality.NBA virus
100.00%

AVG
Win32/Sality
100.00%

Norman
Win32.Sality.3
100.00%

Kaspersky
Virus.Win32.Sality
100.00%

The domain dmwjsc.com has been seen to resolve to the following IP address.

184.168.221.45
ip-184-168-221-45.ip.secureserver.net
May 22, 2016

File downloads found at URLs served by dmwjsc.com.

11 / 68    (Infected)
http://dmwjsc.com/.../setupfblikes2.0.exe  (d86c9cc787069da7083b13a35e177bfc)

The following 95 files have been seen to comunicate with dmwjsc.com in live environments.

TCP » 184.168.221.45:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.45:80
cineplus-2.8.dv16.11-codedownloader.exe (CinePlus-2.8.dV16.11 by CiPlus2.8gV16.11)

TCP » 184.168.221.45:80
app lid-codedownloader.exe (App Lid by Lid)

TCP » 184.168.221.45:80
a5e63233-bead-40fe-80f4-f7e727ff5a13-11.exe (App Lid by Lid)

TCP » 184.168.221.45:80
e601eec0-83fc-4c8c-9251-df13284c3f5f-4.exe (iWebar)

TCP » 184.168.221.45:80
pvgkof.exe (SmartSaver+ 15 by smart-saverplus)

TCP » 184.168.221.45:80
ekp.exe (VideoMedia+Player_v2.3 by enter)

TCP » 184.168.221.45:80
QQBrowser.exe (by Tencent)

TCP » 184.168.221.45:80
813a0a36-6db1-472d-8f3f-0a513084e963-4.exe (CinePlus-1.2V16.11 by CinemaPlusV16.11)

TCP » 184.168.221.45:80
50d4aed4-2aaa-454f-abde-2027603ed4ce-4.exe (SavePass 1.1 by OB)

TCP » 184.168.221.45:80
0cfe77c0-37bc-47db-8726-9d51ad0df797-4.exe (HD-V2.2V14.11 by InfoHD-V2.2V14.11)

TCP » 184.168.221.45:80
radio canyon-codedownloader.exe (Radio Canyon)

TCP » 184.168.221.45:80
0093e960-5fc4-4c01-ab0a-a085713f6814-7.exe (SavePass 1.1 by OB)

TCP » 184.168.221.45:80
756c1618-babd-4342-a5b7-ff0e28b7e2e0-11.exe (iWebar)

TCP » 184.168.221.45:25
www.exe

TCP » 184.168.221.45:80
756c1618-babd-4342-a5b7-ff0e28b7e2e0-4.exe (iWebar)

TCP » 184.168.221.45:80
pwkqv.exe (VideoMedia+Player_v2.3 by enter)

TCP » 184.168.221.45:80
cineplus-1.2v16.11-codedownloader.exe (CinePlus-1.2V16.11 by CinemaPlusV16.11)

TCP » 184.168.221.45:80
756c1618-babd-4342-a5b7-ff0e28b7e2e0-5.exe (iWebar)

TCP » 184.168.221.45:80
onlineguardian-v2.exe

 
Latest 20 of 96 files

Facebook:
Likes:  2
Shares:  2
Comments:  3

Statistics above are for the previous month of October 2024.

0112group.info

43rxp7w9fh.com

5petabytes.net

allnetserveline.com

appsfan.org

blue0101.info

casino-support.info

chipportal.info

colayun.com

digitalmarine.com

discmail.info

down1209.info

down1oad4desktop.com

downloadaixeechahgho.com

downloaddams.com

downloaddean.com

downloadnet.org

downloadvideoeditor.com

downpzivrubajjui.com

downserver5.com

dragonflyweblog.info

ez-downlaod.com

filestodown.com

ground0102.info

installimeshproject.com

landscapehdwalls.com

latest-update.info

oaktreeshop.com

sourcehit.info

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.