get.civilizemanager.com

Corp New Ventures Services

Domain Information

The domain get.civilizemanager.com registered by Corp New Ventures Services was initially registered in December of 2015 through RALLY CRY DOMAINS, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
RALLY CRY DOMAINS, LLC

Server location:
Massachusetts, United States (US)

Create date:
Tuesday, December 1, 2015

Expires date:
Thursday, December 1, 2016

Updated date:
Tuesday, December 8, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ContumarEmpresarialSL.I, PUP.Solimba.ContumarEmpresarial (M), PUP.Solimba.Contumar (M)
100.00%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
20.00%

VIPRE Antivirus
Threat.4758821
20.00%

AVG
Adware BundleApp_r.AJ
20.00%

Sophos
PUA 'Solimba Installer'
20.00%

Malwarebytes
PUP.Optional.Solimba
20.00%

Norman
Application.Generic.1004353
20.00%

NANO AntiVirus
Riskware.Win32.Downware.djsrhf
20.00%

Avira AntiVirus
TR/Trash.Gen
20.00%

G Data
Win32.Application.Morstar
20.00%

AhnLab V3 Security
PUP/Win32.Solimba
20.00%

Vba32 AntiVirus
Downware.Morstar
20.00%

IKARUS anti.virus
not-a-virus:Downloader.Morstar
20.00%

Panda Antivirus
Trj/Genetic.gen
20.00%

F-Secure
Riskware.Application.Generic.1004353
20.00%

The domain get.civilizemanager.com has been seen to resolve to the following 3 IP addresses.

April 1, 2016

a23-0-160-209.deploy.static.akamaitechnologies.com
January 20, 2015

a23-0-160-207.deploy.static.akamaitechnologies.com
January 20, 2015

File downloads found at URLs served by get.civilizemanager.com.

1 / 68      (Adware)

1 / 68      (Adware)
http://get.civilizemanager.com/n/.../Skype.exe  (c4d3236119eddcedae2452d49b85a90b)

1 / 68      (Adware)

1 / 68      (Adware)
http://get.civilizemanager.com/n/.../WAMP5.exe  (5f9dea469ef9a99b4d96ef48a3c316c6)

28 / 68    (Adware)
http://get.civilizemanager.com/n/3.2.46/.../FaceTime.exe  (bae4b187a7548c3fe3baaaa5ebdf28f6)

The following 33 files have been seen to comunicate with get.civilizemanager.com in live environments.

 
Latest 20 of 33 files

URL:
http://get.civilizemanager.com/

Web server:
Apache