home

videos.ratheat.eu

Domain Information

Server location:
California, United States (US)

ASN:
AS22489 CASTLE-ACCESS - Castle Access Inc,US

Root domain:
ratheat.eu

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
DownloadManager.Air Software
100.00%

Malwarebytes
PUP.Optional.AirAdInstaller
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Agnitum Outpost
PUA.AirAd
100.00%

avast!
Win32:Adware-CAH [PUP]
100.00%

NANO AntiVirus
Riskware.Win32.Downware.cwaprw
100.00%

Sophos
PUA 'AirInstaller'
100.00%

Comodo Security
Application.Win32.AirAdInstaller.A
100.00%

Dr.Web
Trojan.SMSSend.5303
100.00%

VIPRE Antivirus
Iminent
100.00%

Avira AntiVirus
ADWARE/Adware.Gen
100.00%

ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
100.00%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
100.00%

AVG
Adware BundleApp_r
100.00%

Panda Antivirus
Trj/Genetic.gen
100.00%

The domain videos.ratheat.eu has been seen to resolve to the following IP address.

69.43.160.166
February 9, 2015

File downloads found at URLs served by videos.ratheat.eu.

35 / 68    (Adware)
http://videos.ratheat.eu/AIRdriverexitcpaUS.html  (driver update.exe)

adsservingcellar.eu

awardshoe.eu

bigtreeforestzs.com

bonusfurniture.biz

bonuswrist.eu

celeryjeans.eu

giftmom.eu

giftsbedroom.eu

giftshook.eu

installationchin.eu

mediamother.eu

myrapid-softupgradesyzs.com

plantationteam.eu

prizeslocket.eu

questionnairefan.eu

samplefireman.eu

soaplettuce.eu

thrillairplane.eu

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.