home

store.manycam.com

Visicom Media Inc.

Domain Information

The domain store.manycam.com registered by Visicom Media Inc. was initially registered in March of 2006 through DNC HOLDINGS, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Koeln, Nordrhein-Westfalen within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
DNC HOLDINGS, INC.

Server location:
Nordrhein-Westfalen, Germany (DE)

Create date:
Wednesday, March 22, 2006

Expires date:
Monday, March 22, 2021

Updated date:
Thursday, June 26, 2014

Root domain:
manycam.com

Whois:
1 manycam.com record

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Visicom.ManyCam (L), Threat.Win.Reputation.IMP, PUP.installCore.dobrepro (M)
75.00%

ESET NOD32
Win32/Toolbar.Visicom.F potentially unwanted application
25.00%

The domain store.manycam.com has been seen to resolve to the following IP address.

89.1.11.103
September 7, 2014

File downloads found at URLs served by store.manycam.com.

1 / 68      (PUP)
https://store.manycam.com/795/cookie?affiliate=3043&redirectto=http://.../ManyCam.exe  (manycamwebinstaller.exe)

1 / 68      (PUP)
https://store.manycam.com/795/cookie?affiliate=32372&redirectto=http://download2.manycam.com/.../ManyCamWebInstaller.exe  (0216eeb9_stp.exe)

1 / 68      (Adware)
https://store.manycam.com/795/cookie?affiliate=32372&redirectto=http://download.dobreprogramy.pl/.../x86  (manycam.exe)

1 / 68      (PUP)
https://store.manycam.com/795/cookie?affiliate=32372&redirectto=http://download3.manycam.com/.../ManyCamWebInstaller.exe  (Setup.exe)

0 / 68
https://store.manycam.com/795/cookie?affiliate=3043&redirectto=http://.../ManyCam.exe  (manycamwebinstaller.exe)

URL:
http://store.manycam.com/

Title:
“ManyCam - Store”

SSL certificate subject:
CN=store.manycam.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)13, OU=GT20752751, SERIALNUMBER=wzV3-fL/gFKmNlc7JK/4g8B/Cyuhe2hC

SSL certificate issuer:
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US

Web server:
Apache/2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.