home

www.funnyday113-dm.biz

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain www.funnyday113-dm.biz is registered by proxy through NAMECHEAP, INC. and was originally registered in June of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the Namecheap, Inc. network.
Registrar:
NAMECHEAP, INC.

Server location:
Georgia, United States (US)

Create date:
Saturday, June 27, 2015

Expires date:
Sunday, June 26, 2016

Updated date:
Saturday, June 27, 2015

ASN:
AS22612 NAMECHEAP-NET - Namecheap, Inc.,US

Root domain:
funnyday113-dm.biz

Whois:
1 funnyday113-dm.biz record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
HW32.Packed
100.00%

McAfee
Artemis!59A4B48D024F, Artemis!57115CF441E4
100.00%

ESET NOD32
Win32/Amonetize.FO potentially unwanted (variant)
100.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

Avira AntiVirus
ADWARE/Amonetize.807936, ADWARE/Amonetize.806416
100.00%

Baidu Antivirus
PUA.Win32.Amonetize
100.00%

Panda Antivirus
Generic Suspicious
100.00%

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

K7 AntiVirus
Adware
50.00%

AVG
Inject2
50.00%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
50.00%

Agnitum Outpost
PUA.Amonetize
50.00%

AhnLab V3 Security
PUP/Win32.Amonetiz
50.00%

G Data
Win32.Application.Agent.EJGAV5
50.00%

The domain www.funnyday113-dm.biz has been seen to resolve to the following IP address.

198.54.117.86
April 6, 2016

File downloads found at URLs served by www.funnyday113-dm.biz.

13 / 68    (PUP)
http://www.funnyday113-dm.biz/tdownload.php?campid=12107&version=1.1.5.90&instid[appname]=Installation Manager&instid[appsetupurl]=.&instid[appimageurl]=http://2.bp.blogspot.com/-RrRYzJM8xL4/TgdM-_RpF7I/AAAAAAAAFi8/hc3Q_h-3msY/s1600/Free_Download_Manager_Icon_by_Spayder26.png&prefix=Setup&instid[thankyoupage]=http://.../&instid[interrupted]=undefined&s1=0a1281a408376487ceb82cc7fc353280419e1c47&t1=1435519158  (kuroko no basket season 3 episode 25 subtitle indonesia arus perjuangan__6824_il1083865.exe)

12 / 68    (PUP)
http://www.funnyday113-dm.biz/tdownload.php?campid=9396&version=1.1.5.26&instid[appname]=GTA 5&instid[appsetupurl]= &instid[appimageurl]=http://fc03.deviantart.net/fs70/f/2012/311/6/.../gta_v_icon_by_mykavv-d5k9id9.png&prefix=GTA 5 PC Installer&instid[thankyoupage]=&instid[interrupted]=undefined&s1=db0106e52f78ae5f1887d3943a1b319f160c52ed&t1=1435545573  (www_dm-jas-down-bay114_biz)

URL:
http://www.funnyday113-dm.biz/

Title:
“funnyday113-dm.biz - Registered at Namecheap.com”

Web server:
nginx/1.0.15 (ASP.NET,ARR/2.5,ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.