home

lp.mediafairypro.com

Louis Vaughn

Domain Information

The domain lp.mediafairypro.com registered by Louis Vaughn was initially registered in April of 2012 through REGTIME LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Kharkiv, Kharkivs'Ka Oblast' within Ukraine which resides on the RIPE Network Coordination Centre network.
Registrar:
REGTIME LTD.

Server location:
Kharkivs'Ka Oblast', Ukraine (UA)

Create date:
Tuesday, April 10, 2012

Expires date:
Sunday, April 10, 2016

Updated date:
Thursday, August 20, 2015

ASN:
AS197726 UKRNAMES-AS Ukrainian Internet Names Center LTD,UA

Root domain:
mediafairypro.com

Whois:
1 mediafairypro.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonetize.Installer.Meta (M)
100.00%

The domain lp.mediafairypro.com has been seen to resolve to the following IP address.

146.120.89.45
146.120.89.45.ip.ukrnames.com
January 30, 2016

File downloads found at URLs served by lp.mediafairypro.com.

1 / 68      (PUP)
http://lp.mediafairypro.com/files/.../download.php?get&file_id=&advert=168&sub=1&site=0&filename=Yd ?????6k?4?1???3?????&name=your file_download.rar&data=IZTENbjUEf4u78GbaQ37bWtgdXRITUFTTp HyZjoG sZhqxFBCeUrVfjrlhZ 1 AV3RzTfiucMUxJBjJVV kfjs=&ip=98.209.215.226&country=US  (your_file_download.exe)

The following 8 files have been seen to comunicate with lp.mediafairypro.com in live environments.

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

TCP » 146.120.89.45:80
media finder.exe (Media Finder)

URL:
http://lp.mediafairypro.com/

Google Analytics:
UA-43064838

Title:
“Download download.zip”

Web server:
Apache/2.2.23 (Unix) PHP/5.2.17 (PHP/5.2.17)

findfreemedia.com

hqhub.net

letshare.us

letshareus.com

m-reader.net

media-finder.net

mediafilesearchonline.com

mp3soundenjoy.com

onlinemediafilesearch.com

thepdfmaster.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.