home

w1070.am15.net

AD Solution Media Associates

Domain Information

The domain w1070.am15.net registered by AD Solution Media Associates was initially registered in November of 2012 through GODADDY.COM, LLC. The hosted servers are located in Nuremberg, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Bayern, Germany (DE)

Create date:
Thursday, November 15, 2012

Expires date:
Tuesday, November 15, 2016

Updated date:
Monday, April 4, 2016

Root domain:
am15.net

Whois:
1 am15.net record

The domain w1070.am15.net has been seen to resolve to the following IP address.

148.251.3.49
static.49.3.251.148.clients.your-server.de
April 21, 2016

File downloads found at URLs served by w1070.am15.net.

0 / 68
http://w1070.am15.net/.../fpx.php?s=63971&w=1070&t=bn&rand=1486417349  (1240db4801d2a4afa3e7292e2fe10ea1)

The following 12 files have been seen to comunicate with w1070.am15.net in live environments.

TCP » 148.251.3.49:443
kometa.exe (Kometa by Kometa Authors)

TCP » 148.251.3.49:80
kometa.exe (Kometa by Kometa Authors)

TCP » 148.251.3.49:443
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 148.251.3.49:443
kometa.exe (Kometa (1.0.0.0) by Kometa Authors)

TCP » 148.251.3.49:8082
kometa.exe (Kometa by Kometa Authors)

TCP » 148.251.3.49:80
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 148.251.3.49:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 148.251.3.49:80
UCBrowser.exe (by UCWeb)

TCP » 148.251.3.49:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 148.251.3.49:443
browser.exe (Yandex by YANDEX)

TCP » 148.251.3.49:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 148.251.3.49:443
kometa.exe (by Kometa Authors)

TCP » 148.251.3.49:443
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 148.251.3.49:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 148.251.3.49:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 148.251.3.49:80
UCBrowser.exe (by UCWeb)

TCP » 148.251.3.49:80
UCBrowser.exe (by UCWeb)

TCP » 148.251.3.49:80
kometa.exe (Kometa (1.0.0.0) by Kometa Authors)

URL:
http://w1070.am15.net/

Title:
“Advmaker.net”

Description:
“Advmaker.net”

SSL certificate subject:
CN=*.am15.net, OU=EssentialSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
nginx (PHP/5.6.10-1+deb.sury.org~trusty+1)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.