home

base205.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain base205.com is registered by proxy through ENOM, INC. and was originally registered in July of 2015. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Wednesday, July 15, 2015

Expires date:
Friday, July 15, 2016

Updated date:
Wednesday, July 15, 2015

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Whois:
1 base205.com record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

VIPRE Antivirus
Iminent
100.00%

Panda Antivirus
PUP/Multitoolbar
100.00%

IKARUS anti.virus
AdWare.MSIL.Colooader
50.00%

Reason Heuristics
PUP.QUALITYSCORE.Installer (M)
50.00%

herdProtect (fuzzy)
a variant of 692261e76855a0e028e4a0fbcf3d6d52c2b35a64
50.00%

The domain base205.com has been seen to resolve to the following IP address.

162.144.91.108
162-144-91-108.unifiedlayer.com
February 21, 2016

File downloads found at URLs served by base205.com.

4 / 68      (Adware)
http://base205.com/getAds.php?signature=qualityscorei3&downloadName=adobe-acrobat-reader.exe  (adwcleaner.exe)

4 / 68      (Adware)
http://base205.com/getAds.php?signature=qualityscorei3&downloadName=navegador-gratis.exe  (adwcleaner.exe)

3 / 68
http://base205.com/getAds.php?signature=husreni3&downloadName=kaspersky-2014.exe  (htc-sync.exe)

3 / 68
http://base205.com/getAds.php?signature=husreni3&downloadName=jre-7.exe  (htc-sync.exe)

4 / 68      (Adware)
http://base205.com/getAds.php?signature=qualityscorei3&downloadName=firefox-2-3.exe  (adwcleaner.exe)

3 / 68
http://base205.com/getAds.php?downloadName=jre-7-lu.exe  (htc-sync.exe)

4 / 68      (Adware)
http://base205.com/getAds.php?signature=qualityscorei3&downloadName=maxthon-cloud-browser.exe  (adwcleaner.exe)

3 / 68
http://base205.com/getAds.php?signature=husreni3&downloadName=firefox-2-3.exe  (htc-sync.exe)

0 / 68
http://base205.com/getAds.php?downloadName=jre-7-lu.exe  (adwcleaner.exe)

3 / 68
http://base205.com/getAds.php?signature=husreni3&downloadName=whatsapp-for-pc-free.exe  (htc-sync.exe)

4 / 68      (Adware)
http://base205.com/getAds.php?signature=qualityscorei3&downloadName=happy-wheels-1-1-0.exe  (adwcleaner.exe)

3 / 68
http://base205.com/getAds.php?signature=husreni3&downloadName=cacaoweb-gratuit.exe  (htc-sync.exe)

The following 2 files have been seen to comunicate with base205.com in live environments.

TCP » 162.144.91.108:80
Client.exe

TCP » 162.144.91.108:80
adwcleaner.exe (Setup Manager)

URL:
http://base205.com/

Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4

free-safe.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.