home

www.fhserve.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.fhserve.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in January of 2011. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Friday, January 7, 2011

Expires date:
Sunday, January 7, 2018

Updated date:
Monday, May 16, 2016

ASN:
AS35415 WEBZILLA Webzilla B.V.,NL

Root domain:
fhserve.com

Whois:
1 fhserve.com record

The domain www.fhserve.com has been seen to resolve to the following 2 IP addresses.

78.140.181.188
May 17, 2016

78.140.181.169
v-5-226-d2816-169.webazilla.com
May 17, 2016

File downloads found at URLs served by www.fhserve.com.

0 / 68
http://www.fhserve.com/www/delivery/ck.php?oaparams=2__bannerid=237880__zoneid=4118__OXLCA=1__cb=d61f1218aa__oadest=http://service.srvmd1.com/.../?appid=352&subid=3161140513.237880.d61f1218aa.4118&sectionid=4118  (setup.exe)

17 / 68    (Adware)
http://www.fhserve.com/www/delivery/ck.php?oaparams=2__bannerid=237866__zoneid=3674__OXLCA=1__cb=72283315ff__oadest=http://service.srvmd1.com/.../?appid=352&subid=415360656.237866.72283315ff.3674&sectionid=3674  (setup.exe)

The following 40 files have been seen to comunicate with www.fhserve.com in live environments.

TCP » 78.140.181.169:80
bdsetup.exe

TCP » 78.140.181.169:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 78.140.181.169:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
megacubo.exe (Megacubo by www.megacubo.net)

TCP » 78.140.181.169:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 78.140.181.169:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
wikiz.exe

TCP » 78.140.181.169:80
jingling.exe

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
dsrlte.exe

TCP » 78.140.181.169:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 78.140.181.169:80
UCBrowser.exe (by UCWeb)

TCP » 78.140.181.169:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 64 files

URL:
http://www.fhserve.com/

Title:
“Contact Us”

Web server:
nginx/1.8.0

Facebook:
Likes:  6
Shares:  18

Statistics are for the previous month.

reduxmediia.com

xmediaserve.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.