www.mysocialcolor.com

Domain Admin  (Proxy Registrant)

Domain Information

The domain www.mysocialcolor.com is registered by proxy through PARARESCUEDOMAINS.COM, LLC and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Frankfurt Am Main, Hessen within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
PARARESCUEDOMAINS.COM, LLC

Server location:
Hessen, Germany (DE)

Create date:
Tuesday, November 10, 2015

Expires date:
Thursday, November 10, 2016

Updated date:
Tuesday, November 10, 2015

ASN:
AS47846 SEDO-AS Sedo GmbH,DE

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.HighTechMarketing, PUP.Montiera.HighTechMarketing.Installer (M)
100.00%

Trend Micro House Call
TROJ_GEN.F47V0929, TROJ_GEN.F47V1031
66.67%

Dr.Web
Adware.Toolbar.21
33.33%

SUPERAntiSpyware
Heur.Agent/Gen-WhiteBox
33.33%

The domain www.mysocialcolor.com has been seen to resolve to the following IP address.

custip-2072.sedoparking.com
April 13, 2016

File downloads found at URLs served by www.mysocialcolor.com.

3 / 68      (Adware)
http://www.mysocialcolor.com/es/.../mysocialcolor.exe  (3cd943818bdd9e3996d9cef126405c94)

2 / 68      (Adware)
http://www.mysocialcolor.com/es/.../mysocialcolor.exe  (392c7ef8e859373ff7b42cf3e2531d19)

2 / 68      (Adware)
http://www.mysocialcolor.com/es/.../mysocialcolor.exe  (609f35342d2b408d1c0b6f22212b0d96)

The following 2 files have been seen to comunicate with www.mysocialcolor.com in live environments.

URL:
http://www.mysocialcolor.com/

Title:
“mysocialcolor.com -&nbspThis website is for sale! -&nbspmysocialcolor Resources and Information.”

Description:
“This website is for sale! mysocialcolor.com is your first and best source for all of the information you’re looking for. From general topics to more of what you would expect to find here, mysocialcolor.com has it all. We hope you find what you ar...”

Web server:
nginx