flv.onesappz.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain flv.onesappz.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Friday, July 5, 2013

Expires date:
Sunday, July 5, 2015

Updated date:
Sunday, July 6, 2014

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BechiroSL.O, PUP.Installer.BechiroSL.F, PUP.Installer.Solimba, PUP.Installer.Installer.Meta, PUP.Solimba.Bechiro.Bundler (M), PUP.Solimba (M)
100.00%

Malwarebytes
PUP.Optional.InstallCore, PUP.Optional.Rapiddown, PUP.Optional.BundleInstaller.A, PUP.Optional.Bundler
92.31%

K7 AntiVirus
Unwanted-Program
92.31%

VIPRE Antivirus
DownloadMR, Threat.4782980, Threat.4895151
92.31%

Vba32 AntiVirus
Downware.Morstar
92.31%

AVG
BundleApp, Found Luhe.Fiha.A, Adware BundleApp.BI, Adware BundleApp.BL
92.31%

G Data
Win32.Application.Morstar, Gen:Application.Bundler.Firseria
89.74%

Comodo Security
Application.Win32.FirseriaInstaller.RRB, Application.Win32.Solimba.L
82.05%

Rising Antivirus
PE:Malware.FirseriaInstaller!6.17AF, NS:PUF.SilenceInstaller!1.9DDF
74.36%

ESET NOD32
Win32/FirseriaInstaller (variant)
71.79%

avast!
Win32:PUP-gen [PUP], Adware-gen [Adw]
46.15%

Agnitum Outpost
PUA.Firseria, PUA.Downloader
46.15%

Dr.Web
Trojan.DownLoader11.4114, Trojan.DownLoader11.3502, Trojan.DownLoader11.3686, Adware.Downware.2167
46.15%

Avira AntiVirus
APPL/Firseria.A.15, APPL/FirInstaller.B, APPL/Firseria.D, TR/Spy.AI.14318.9
46.15%

MicroWorld eScan
Gen:Variant.Strictor.55064, Gen:Application.Bundler.Firseria.1
43.59%

The domain flv.onesappz.com has been seen to resolve to the following 6 IP addresses.

September 18, 2016

unallocated.barefruit.co.uk
May 3, 2015

ec2-75-101-156-240.compute-1.amazonaws.com
September 4, 2014

ec2-54-197-235-95.compute-1.amazonaws.com
September 4, 2014

dl02.lw100.1e111.net
February 2, 2014

dl01.lw100.1e111.net
February 2, 2014

File downloads found at URLs served by flv.onesappz.com.

1 / 68      (Adware)
http://flv.onesappz.com/n/3.0.30.5/.../Setup.exe  (de67dceb732fd17643a066dbc4b6327c)

1 / 68      (Adware)
http://flv.onesappz.com/n/3.0.30.6/.../Setup.exe  (b33f6216b7de22f5879735df96c964cb)

2 / 68      (PUP)
http://flv.onesappz.com/n/3.0.30.2/.../Setup.exe  (67162ca56ec55742ea46f3b859c73b44)

2 / 68      (PUP)
http://flv.onesappz.com/n/.../Setup.exe  (67162ca56ec55742ea46f3b859c73b44)

30 / 68    (Adware)
http://flv.onesappz.com/n/3.0.28.5/.../Setup.exe  (994cc99a1100bb2ab9298c1635ebad0f)

27 / 68    (Adware)
http://flv.onesappz.com/n/3.0.30.1/.../Setup.exe  (58c5903e224d0386345451d56a36044b)

26 / 68    (Adware)
http://flv.onesappz.com/n/3.0.29.5/.../Setup.exe  (6a502c8ecc64f95d3e19b45721cfaefc)

10 / 68    (Adware)

20 / 68    (Adware)

The following 230 files have been seen to comunicate with flv.onesappz.com in live environments.

 
Latest 20 of 230 files

URL:
http://flv.onesappz.com/

Web server:
nginx/1.0.15