» platinumdown.com
Overview
Analysis
IPs Addresses (1)
Downloads (18)
Website Detail
Related Domains (12)

platinumdown.com

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain platinumdown.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dusseldorf, Nordrhein-Westfalen within Germany which resides on the RIPE Network Coordination Centre network.

Registrant:

Domains By Proxy, LLC

Registrar:

GODADDY.COM, LLC

Server location:

Nordrhein-Westfalen, Germany (DE)

Create date:

Monday, July 1, 2013

Expires date:

Friday, July 1, 2016

Updated date:

Thursday, July 2, 2015

ASN:

AS25074 INETBONE-AS MESH GmbH

Whois:

3 platinumdown.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.SITEONSPOT.W, PUP.Installer.SITEONSPOT.b, PUP.Installer.SITEONSPOT.X, PUP.SITEONSPOT.EE, PUP.Installer.SITEONSPOT.Y, PUP.Somoto.Bundler (M), PUP.Somoto.SITEONSPOT.Bundler (M), PUP.Somoto.SITEONSP.Bundler (M), PUP.Somoto (M)

100.00%

Clam AntiVirus

Win.Adware.Somoto

72.22%

Dr.Web

Trojan.Packed.26824, Trojan.Packed.28357

66.67%

Kaspersky

not-a-virus:AdWare.Win32.Agent, not-a-virus:Downloader.NSIS.Mazel

66.67%

VIPRE Antivirus

Trojan.Win32.Generic, BetterInstaller, Threat.4150696

66.67%

Baidu Antivirus

Adware.Win32.Somoto, Adware.Win32.Agent

61.11%

Sophos

Somoto BetterInstaller, Generic PUA OL, Generic PUA IP, PUA 'Somoto BetterInstaller'

55.56%

ESET NOD32

Win32/Somoto

50.00%

MicroWorld eScan

Application.Bundler.Somoto.J, Application.Bundler.Somoto.W

50.00%

Bitdefender

Application.Bundler.Somoto.J, Application.Bundler.Somoto.W

50.00%

NANO AntiVirus

Riskware.Win32.Agent.dbdiac, Riskware.Nsis.Adware.dbnhrj, Riskware.Win32.Downware.digcac

50.00%

F-Secure

Application.Bundler.Somoto.J

50.00%

nProtect

Trojan-Clicker/W32.Agent.222960, Trojan-Clicker/W32.Agent.227048, Trojan-Clicker/W32.Agent.227072, Trojan-Clicker/W32.Agent.225296

44.44%

Lavasoft Ad-Aware

Application.Bundler.Somoto.J

44.44%

Panda Antivirus

Trj/OCJ.F, Trj/CI.A, Trj/Chgt.C, PUP/MultiToolbar.A

44.44%

The domain platinumdown.com has been seen to resolve to the following IP address.

78.138.105.151

May 31, 2014

File downloads found at URLs served by platinumdown.com.

1 / 68 (Adware)

http://platinumdown.com/nlp/g/smb/.../dl?p1=otvseriesrhab&datetime=20140527_2053&utm_source=smb&utm_medium=affiliate&utm_campaign=otvseriesrhab&translate=en&tracking_percent=100&software_name=HDPlug-in&download_country=US&rate=0.000&margin=20&cpa_detective_session_id=cq03ybm6m89g&timestamp=1401223990&__cookie=__utma=1.1096591575.1401224009.1401224009.1401224009.1; __utmb=1.2.10.1401224009; __utmc=1; __utmz=1.1401224009.1.1.utmcsr=smb|utmccn=otvseriesrhab|utmcmd=affiliate|utmcct=flvplayer (flvplayersetup-8r5co04m.exe)

1 / 68 (Adware)

http://platinumdown.com/.../FLVPlayerSetup-N07szfyIY.exe (7393f6713753745041e7aaf0ded508ca)

1 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-N2VGV3Pub.exe (00000003)

1 / 68 (Adware)

http://platinumdown.com/.../FreeZip_downloader-NefLmX2PG.exe (63360fa59c5e904cbd7106d375cb894b)

1 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-NamiGEm4e.exe (09040e556e2716c61d87c7c552c68e6b)

25 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-Nbr5OLNLD.exe (71eeac9bdc0e784ae093dda7d0171eed)

21 / 68 (Adware)

http://platinumdown.com/.../FLVPlayerSetup-2hKjZI0W.exe (clickheretodownloadsetup-8behc2ci.exe)

27 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-N0Jf6VTh6.exe (be7c1f3b8da9ef110dd8aa2743915e52)

20 / 68 (Adware)

http://platinumdown.com/.../EdgeofTomorrow(2014)_downloader-NcPXqwSDh.exe (edgeoftomorrow_downloader-ncpxqwsdh.exe)

10 / 68 (Adware)

http://platinumdown.com/nlp/g/smb/.../dl?p1=otvseriesrhabxwdr&datetime=20140525_1343&utm_source=smb&utm_medium=affiliate&utm_campaign=otvseriesrhabxwdr&translate=en&tracking_percent=100&software_name=HDPlug-in&download_country=UK&rate=0.000&margin=20&cpa_detective_session_id=s5eedqtbodvu&timestamp=1401025381&__cookie=__utma=1.1253574090.1401025323.1401025323.1401025323.1; __utmb=1.4.10.1401025323; __utmc=1; __utmz=1.1401025323.1.1.utmcsr=smb|utmccn=otvseriesrhabxwdr|utmcmd=affiliate|utmcct=flvplayer (flvplayersetup-1lyqzao5.exe)

23 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-NeYIZMvSg.exe (62a323ddd83da2b56580301570e81f91)

23 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-N9cFQYQLN.exe (37d02ead62666f2112657cdd995cbb84)

23 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-N1hFQGs0Q.exe (b7f57a017324836c7b9066ef9b243e11)

16 / 68 (Adware)

http://platinumdown.com/.../FLVPlayerSetup-NceR4RKw7.exe (ef2519d9a6dcd3a881892bc79e7ac825)

7 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-N0IroE03w.exe (12bb7592c47fd858c14493d38655b6d6)

22 / 68 (Adware)

http://platinumdown.com/.../FLVPlayer_downloader-Nbu4wRubn.exe (b2e3e1c9a2a6974fa23a2ee7d70ee45b)

10 / 68 (Adware)

http://platinumdown.com/nlp/g/smb/.../dl?p1=otvseriesrhabxwdr&datetime=20140525_1342&utm_source=smb&utm_medium=affiliate&utm_campaign=otvseriesrhabxwdr&translate=en&tracking_percent=100&software_name=HDPlug-in&download_country=UK&rate=0.000&margin=20&cpa_detective_session_id=lskoe8x66fmi&timestamp=1401025322&__cookie=__utma=1.1253574090.1401025323.1401025323.1401025323.1; __utmb=1.2.10.1401025323; __utmc=1; __utmz=1.1401025323.1.1.utmcsr=smb|utmccn=otvseriesrhabxwdr|utmcmd=affiliate|utmcct=flvplayer (flvplayersetup-1lyqzao5.exe)

4 / 68 (Adware)

http://platinumdown.com/nlp/n/smb/.../dl?p1=damasgate&datetime=20140524_1332&utm_source=smb&utm_medium=affiliate&utm_campaign=damasgate&translate=en&tracking_percent=100&software_name=start&filename=download&download_country=MA&rate=0.000&margin=20&cpa_detective_session_id=zn50v4mwruti&timestamp=1400938331&__cookie=__utma=1.646172230.1400938336.1400938336.1400938336.1; __utmb=1.2.10.1400938336; __utmc=1; __utmz=1.1400938336.1.1.utmcsr=smb|utmccn=damasgate|utmcmd=affiliate|utmcct=flvplayer (downloadsetup-dlmgsl8z.exe)

URL:

http://platinumdown.com/

Web server:

nginx

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.