home

stapi.sienappnetwork.com

SIEN

Domain Information

The domain stapi.sienappnetwork.com registered by SIEN was initially registered in April of 2012 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Jose, California within the United States which resides on the CDNetworks Inc. network.
Registrar:
GANDI SAS

Server location:
California, United States (US)

Create date:
Monday, April 2, 2012

Expires date:
Sunday, April 2, 2017

Updated date:
Friday, January 29, 2016

ASN:
AS36408 CDNETWORKSUS-02 - CDNetworks Inc.,US

Root domain:
sienappnetwork.com

Whois:
2 sienappnetwork.com records

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Sien, PUP.Sien.LiveSoftAction.Bundler (M), PUP.Sien.LiveSoftAction.Installer (M), PUP.Sien (M)
100.00%

Dr.Web
Adware.Downware.423, Adware.Downware.1112
25.00%

Trend Micro House Call
TROJ_GEN.F47V0824
12.50%

VIPRE Antivirus
Appscion
12.50%

ESET NOD32
Win32/GetNow.A potentially unwanted application
12.50%

McAfee
LiveSoftAction!0701796485FF
12.50%

Malwarebytes
PUP.Optional.LiveSoftAction.A
12.50%

K7 AntiVirus
Unwanted-Program
12.50%

Agnitum Outpost
Riskware.Agent
12.50%

NANO AntiVirus
Riskware.Win32.Downware.cxkdto
12.50%

Comodo Security
Application.Win32.GetNow.C
12.50%

Avira AntiVirus
TR/Trash.Gen
12.50%

Sophos
PUA 'Live Soft Action' (of type Adware)
12.50%

IKARUS anti.virus
AdWare.GetNow
12.50%

AVG
Adware Generic_r
12.50%

The domain stapi.sienappnetwork.com has been seen to resolve to the following 17 IP addresses.

174.35.27.70
September 17, 2016

66.114.52.7
September 17, 2016

174.35.73.97
July 1, 2016

174.35.73.139
July 1, 2016

174.35.27.74
April 4, 2016

66.114.52.12
February 25, 2016

66.114.52.18
February 25, 2016

66.114.52.9
January 28, 2016

174.35.27.77
January 28, 2016

66.114.52.6
December 15, 2015

174.35.27.73
December 15, 2015

174.35.27.75
November 23, 2015

66.114.52.14
November 23, 2015

66.114.52.15
September 10, 2015

66.114.52.17
September 10, 2015

174.35.73.91
May 5, 2015

174.35.73.148
May 5, 2015

File downloads found at URLs served by stapi.sienappnetwork.com.

1 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (spybot - search & destroy provided through getnow.exe)

1 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (google chrome powered by getnow.exe)

1 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (winrar distribuído por getnow.exe)

1 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (windows live messenger - msn messenger distribue par iminent.exe)

0 / 68
http://stapi.sienappnetwork.com/api/.../setup.exe  (winrar provided through getnow.exe)

22 / 68    (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (winrar provided through getnow.exe)

1 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (spybot - search & destroy powered by getnow.exe)

1 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (getnow_downloader_for_google_chrome.exe)

3 / 68      (Adware)
http://stapi.sienappnetwork.com/api/.../setup.exe  (winrar powered by getnow.exe)

The following 62 files have been seen to comunicate with stapi.sienappnetwork.com in live environments.

TCP » 66.114.52.14:80
1468567241.exe

TCP » 174.35.73.139:80
1468567241.exe

TCP » 66.114.52.9:80
1468567241.exe

TCP » 66.114.52.15:80
1468567241.exe

TCP » 174.35.27.73:80
1468567241.exe

TCP » 174.35.73.139:80
smelled.exe (Smelled)

TCP » 66.114.52.7:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.91:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.12:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.17:80
1468567241.exe

TCP » 174.35.27.74:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.17:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.73:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 174.35.73.148:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.18:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.9:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.73.139:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 66.114.52.6:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.73:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.18:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

 
Latest 20 of 336 files

URL:
http://stapi.sienappnetwork.com/

Google Analytics:
UA-25145764

Title:
“Bespoke web development and web design specialists based in London”

Description:
“Bespoke web development and web design specialists based in London - AVAMAE Software Solutions: for professional website design and development services. We create bespoke web applications, including secure ecommerce site to custom CMS applicatio...”

Web server:
PWS/8.1.36

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.