www.flvplayer-download.net

Whois Privacy Corp.

Domain Information

The domain www.flvplayer-download.net registered by Whois Privacy Corp. was initially registered in November of 2014 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
Dublin City, Ireland (IE)

Create date:
Sunday, November 2, 2014

Expires date:
Wednesday, November 2, 2016

Updated date:
Tuesday, November 3, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.KanchanaKhiandee.Q, PUP.VASSANAKONGSOONGNERN.Q, PUP.VASSANAKONGSOONGNERN.I, PUP.CoolMirage
91.67%

AVG
Generic
83.33%

VIPRE Antivirus
CoolMirage Ltd
75.00%

K7 AntiVirus
Adware
75.00%

Kaspersky
not-a-virus:AdWare.NSIS.Yontoo, not-a-virus:Downloader.Win32.TornTV
75.00%

Dr.Web
Adware.Downware.8319, Adware.Yontoo.54
75.00%

ESET NOD32
NSIS/TrojanDownloader.Adload.AA, NSIS/TrojanDropper.Agent.CB
75.00%

McAfee
Artemis!34C1CBBE611F, Artemis!D28CBE6FAB4F, Artemis!825D269C90EE, Artemis!21031D20DE47, Artemis!E50423C905E2, Artemis!F2FDCC9824CB
66.67%

Sophos
Kanchana Khiandee adware, Generic PUA HJ, CoolMirage, Generic PUA AA
66.67%

Trend Micro House Call
Suspicious_GEN.F47V1204, Suspicious_GEN.F47V0202, Suspicious_GEN.F47V0204, Suspici.EDD0D2A5, Suspicious_GEN.F47V0217
58.33%

AhnLab V3 Security
Win-PUP/CrossRider
50.00%

G Data
NSIS.Application.Adload
33.33%

Baidu Antivirus
Adware.NSIS.Yontoo, Hacktool.Win32.TornTV, Trojan.MSIL.ShimChanger
33.33%

Panda Antivirus
Trj/Chgt.N, Generic Suspicious
25.00%

Qihoo 360 Security
Win32/Trojan.b01, Win32/Virus.Downloader.e28
25.00%

The domain www.flvplayer-download.net has been seen to resolve to the following 3 IP addresses.

ns1.ibspark.com
November 7, 2015

ec2-50-18-157-95.us-west-1.compute.amazonaws.com
November 10, 2014

ec2-50-18-126-37.us-west-1.compute.amazonaws.com
November 10, 2014

File downloads found at URLs served by www.flvplayer-download.net.

 
Latest 30 of 1,285 download URLs

The following 142 files have been seen to comunicate with www.flvplayer-download.net in live environments.

 
Latest 20 of 154 files

URL:
http://www.flvplayer-download.net/

Title:
“flvplayer-download.net”

Web server:
nginx