» www.wintvapp.com
Overview
Analysis
IPs Addresses (3)
Downloads (3)
Network (13)
Statistics
Related Domains (30)

www.wintvapp.com

Amonetize ltd.

Domain Information

The domain www.wintvapp.com registered by null was initially registered in April of 2013 through Moniker Online Services. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Rugby, England within United Kingdom which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Amonetize ltd. who is located in Raanana, Alberta in Israel.

Registrant:

null for Amonetize ltd.

Registrar:

Moniker Online Services

Server location:

England, United Kingdom (GB)

Create date:

Thursday, April 25, 2013

Expires date:

Monday, April 25, 2016

Updated date:

Thursday, June 4, 2015

ASN:

AS42831 UKSERVERS-AS UK Dedicated Servers Limited,GB

Root domain:

wintvapp.com

Whois:

3 wintvapp.com records

Google Safe Browsing:

malware

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Malwarebytes

PUP.Optional.InstallMonetizer, PUP.Optional.Amonetize

100.00%

Reason Heuristics

PUP.Installer.Amonetizeltd.a, PUP.Installer.Amonetizeltd.DD, PUP.Installer.Amonetizeltd.h

100.00%

McAfee

Adware-Amonetize!1A436410F719, Adware-Amonetize!EEE8B735513C

66.67%

Trend Micro House Call

TROJ_GEN.F47V0126, TROJ_GEN.F47V1125

66.67%

avast!

Win32:Amonetize-E [PUP], Win32:Amonetize-F [PUP]

66.67%

Dr.Web

Adware.Downware.1655, Adware.Downware.1729

66.67%

VIPRE Antivirus

Amonetize

66.67%

Sophos

Amonetize

66.67%

AhnLab V3 Security

PUP/Win32.Amonetiz

66.67%

ESET NOD32

Win32/Amonetize.AD (variant), Win32/Amonetize (variant)

66.67%

Fortinet FortiGate

Riskware/Amonetize, Adware/Fam.NB

66.67%

Comodo Security

ApplicUnwnt

33.33%

Avira AntiVirus

ADWARE/Adware.Gen2

33.33%

Bkav FE

W32.Clod11d.Trojan

33.33%

MicroWorld eScan

Adware.Shopper.S

33.33%

The domain www.wintvapp.com has been seen to resolve to the following 3 IP addresses.

94.229.72.116

no.rdns.ukservers.com

February 3, 2016

209.222.14.3

209.222.14.3.choopa.net

May 4, 2015

54.214.5.255

ec2-54-214-5-255.us-west-2.compute.amazonaws.com

May 30, 2014

File downloads found at URLs served by www.wintvapp.com.

20 / 68 (Adware)

http://www.wintvapp.com/.../direct-download.html?version=1.1.5.89&iaff1=9982&ci=4645&capp=TVapp&ti1=[clickID] (flashplayersetup__4651_i157472008_il540.exe)

5 / 68 (Adware)

http://www.wintvapp.com/.../dd2.html?version=1.1.5.55&ci=3313&capp=TVapp&ti1=986 (game__2443_i365262461_il26497.exe)

11 / 68 (Adware)

http://www.wintvapp.com/.../dd2.html?version=1.1.5.55&ci=3313&capp=TVapp&ti1=104 (flashplayer__4369_i295095550_il1.exe)

The following 13 files have been seen to comunicate with www.wintvapp.com in live environments.

TCP » 94.229.72.116:80

FoodBuzzUpdate.exe (ToolbarUpdater by FoodBuzz)

TCP » 94.229.72.116:80

alg.exe (CPAX20 by SornSoft)

TCP » 94.229.72.116:80

A-Trainer.exe (Advance Trainer by HackMew Productions)

TCP » 94.229.72.116:80

groupmanager.exe

TCP » 94.229.72.116:80

kingtranslatesetup-r0-n-bc.exe (KingTranslate by Koyote-Lab)

TCP » 209.222.14.3:80

bitcomet_x64.exe (BitComet 64-bit by www.BitComet.com)

TCP » 94.229.72.116:80

fsd814a.exe (Installer)

TCP » 94.229.72.116:80

DeadLine's Virus Maker.exe (DeadLine's Virus Maker by DeadLine)

TCP » 209.222.14.3:80

tunnel.exe (by Microsoft)

TCP » 209.222.14.3:80

PEG2.exe (PE GUARD 2 by OHTIC.com)

TCP » 209.222.14.3:6969

QQDownload.exe (by Tencent Technology (Shenzhen) Company Limited)

TCP » 209.222.14.3:80

quicktime.crx

TCP » 94.229.72.116:80

Updater.exe (Updater)

Facebook:

Likes: 36

Shares: 17

Comments: 10

Statistics are for the previous month.

Related Domains

reliabletrusteddownloads.com

easyfiledownloads.net

30 of 30 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.