s1.atdhenettvapp.com

FIRSTROWSPORTAPP

Domain Information

The domain s1.atdhenettvapp.com registered by FIRSTROWSPORTAPP was initially registered in September of 2012 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Studio City, California within the United States which resides on the netDNA network.
Registrar:
ENOM, INC.

Server location:
California, United States (US)

Create date:
Wednesday, September 19, 2012

Expires date:
Saturday, September 19, 2015

Updated date:
Monday, September 15, 2014

ASN:
AS4436 AS-NLAYER - nLayer Communications, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CoolMirageltd.X, Threat.Installer.TerraFirmaInternetConsulting, PUP.Installer.TerraFirmaInternetConsulting, PUP.CoolMirage.Installer (M), PUP (M)
100.00%

avast!
Win32:Downloader-TPG [PUP], NSIS:Oneclick-Z [PUP], Downloader-UHI [PUP]
23.08%

SUPERAntiSpyware
Adware.Downware, PUP.BundleInstaller
23.08%

Dr.Web
Adware.Downware.902, Adware.Downware.651, Threat.Undefined
23.08%

Avira AntiVirus
APPL/CoolMirage.Gen6, ADWARE/Adware.Gen6
23.08%

Comodo Security
Application.Win32.MCool.A, Application.Win32.Downware.G
15.38%

VIPRE Antivirus
Iminent, Threat.4784938
15.38%

Sophos
FT Downloader, PUA '1 Click Downloader' (of type Adware)
15.38%

NANO AntiVirus
Riskware.Nsis.Downware.yrefc, Trojan.Script.Downware.cujzax
15.38%

Malwarebytes
PUP.BundleInstaller.DW
7.69%

Baidu Antivirus
Trojan.Adware.Win32.1ClickDownload
7.69%

ESET NOD32
Win32/Adware.1ClickDownload
7.69%

Trend Micro House Call
TROJ_GEN.RCBH1LV
7.69%

McAfee
Program.Adware-SweetIM
7.69%

Bkav FE
W32.HfsAdware
7.69%

The domain s1.atdhenettvapp.com has been seen to resolve to the following 2 IP addresses.

May 17, 2016

April 13, 2014

File downloads found at URLs served by s1.atdhenettvapp.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

7 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

13 / 68    (Adware)

11 / 68    (Adware)

The following 4 files have been seen to comunicate with s1.atdhenettvapp.com in live environments.

URL:
http://s1.atdhenettvapp.com/

Web server:
NetDNA-cache/2.2