home

filesareworldy.asia

filesareworldy.asia

Domain Information

The domain filesareworldy.asia registered by filesareworldy.asia was initially registered in May of 2013 through PDR Ltd. d/b/a PublicDomainRegistry.com R28-ASIA (303). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com R28-ASIA (303)

Server location:
New York, United States (US)

Create date:
Wednesday, May 1, 2013

Expires date:
Thursday, May 1, 2014

Updated date:
Monday, July 1, 2013

Whois:
1 filesareworldy.asia record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer.AA, Adware.WebPick.Installer (M), Adware (M)
100.00%

Bkav FE
HW32.CDB
25.00%

McAfee
PUP-FHQ!E0AFB8F4AD63
25.00%

Malwarebytes
PUP.Optional.Installex
25.00%

SUPERAntiSpyware
PUP.InstallRex/Variant
25.00%

avast!
Win32:InstalleRex-Q [PUP]
25.00%

Kaspersky
not-a-virus:AdWare.Win32.Agent
25.00%

NANO AntiVirus
Riskware.Win32.Adware.crcapk
25.00%

Comodo Security
Application.Win32.InstalleRex.KG
25.00%

Dr.Web
Adware.Downware.1166
25.00%

VIPRE Antivirus
Installerex/WebPick
25.00%

Avira AntiVirus
ADWARE/InstallRex.Gen
25.00%

Sophos
InstallRex
25.00%

G Data
Win32.Application.InstalleRex
25.00%

Vba32 AntiVirus
Downloader.AdLoad
25.00%

The domain filesareworldy.asia has been seen to resolve to the following 2 IP addresses.

108.162.197.99
(CloudFlare)
January 8, 2014

108.162.196.99
(CloudFlare)
January 8, 2014

File downloads found at URLs served by filesareworldy.asia.

1 / 68      (Adware)
http://filesareworldy.asia/v343  (vaudix.exe)

1 / 68      (Adware)
http://filesareworldy.asia/.../?product_name=IDM_6.15.Build.12 By comnop.rar&installer_file_name=IDM_6.15.Build.12 By comnop.rar&r=751  (idm_6.15.build.12 by comnop.rar.exe)

1 / 68      (Adware)
http://filesareworldy.asia/v136  (zoomplayer.exe)

21 / 68    (Adware)
http://filesareworldy.asia/.../?product_name=Debtors' Prison: The Politics of Austerity Versus Possibility&installer_file_name=Debtors' Prison: The Politics of Austerity Versus Possibility&r=810  (debtors' prison- the politics of austerity versus possibility.exe)

January 8, 2014
iframe.filesareworldy.asia

URL:
http://filesareworldy.asia/

Title:
“Welcome to nginx!”

Web server:
cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.