home

bestown.info

Elbaz Kapulsky

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
Dynadot, LLC (R259-LRMS)

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:
1 bestown.info record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AndreyHmelnikov.B, PUP.AndreyHmelnikov.CC, (M), PUP.AndreyHmelnikov.x, PUP.AndreyHmelnikov.BB, PUP.AndreyHmelnikov.EE, PUP.AndreyHmelnikov.d, PUP.WebPick, PUP.Bundler.WebPick, PUP.WebPick.AndreyHmelnikov (M), PUP.WebPick.AndreyHm (M), PUP.WebPick (M)
92.86%

AVG
Adware Generic_r.VD, Win.Threat.Medium
28.57%

avast!
Win32:MultiPlug-JU [PUP], Win32:MultiPlug-LT [PUP], Win32:Agent-AUVV [Trj], Win32:Agent-AYLT [PUP]
28.57%

Emsisoft Anti-Malware
Gen:Variant.Adware.Kazy.481287, Gen:Variant.Adware.MPlug.16
28.57%

Dr.Web
Trojan.Crossrider.36840, Trojan.Packed.24060, Trojan.Crossrider1.22656
26.19%

McAfee
MultiPlug-FRO, Program.MultiPlug-FRO
26.19%

Malwarebytes
PUP.Optional.MultiPlug
23.81%

K7 AntiVirus
Unwanted-Program
23.81%

Bitdefender
Gen:Variant.Adware.Kazy.481287, Gen:Variant.Adware.MPlug.16
23.81%

NANO AntiVirus
Riskware.Win32.MultiPlug.dfjscb
23.81%

Sophos
MultiPlug, PUA 'MultiPlug' (of type Adware)
23.81%

Comodo Security
Application.Win32.Multiplug.CT
23.81%

Avira AntiVirus
ADWARE/MultiPlug.Gen7, PUA/Multiplug.trou
23.81%

G Data
Gen:Variant.Adware.Kazy.481287, Gen:Variant.Adware.MPlug.16
23.81%

ESET NOD32
Win32/AdWare.MultiPlug.CN application, Win32/AdWare.MultiPlug.CT application
23.81%

The domain bestown.info has been seen to resolve to the following 4 IP addresses.

52.27.166.51
ec2-52-27-166-51.us-west-2.compute.amazonaws.com
August 17, 2015

54.69.104.255
ec2-54-69-104-255.us-west-2.compute.amazonaws.com
May 3, 2015

104.28.16.31
November 10, 2014

104.28.17.31
November 10, 2014

File downloads found at URLs served by bestown.info.

1 / 68      (Adware)
http://bestown.info/ebb25b4bbb1217b4b3f7608abe1fc78b/zonabaC/dl.php?id=1415187477701791770&r=http://bestoria.info/v2967/lp/?q=IRbWS4a4dEuuztvqom2TJOnhGT5QTtZeaGEwSWdkYgInmwZnA3FMhHFN46aj3 e3Vcsy2rRAGlY C7rTz1/1Tz3eNFqjw6CzzTjvaYYhWeOf5CB 5CZ1ocqFqXwRle8ePiZPr1lEZN4ic3ez 6OPpvm0qXG srS8rDjiycgzqFCmnpdVDgh69PDORv6RcPf/9PC 4DxQGXnYa3KA b2COCbpFYje75zOXcC6yCzyefDf1N8yD5QSzC/O3eiJ kGXGJwxm 43XxTCZTv1dg3TLWg7Yu0L4RFSrC/iRaBx3JcgFXRa6Oz0yYPJKrTu6OA/kN9OqrT2KxuzqowqStX7Nwentc6r23mnHGz PqbMDAceYhD91eByEjb8sb5B9LNGt8v/DjNCNl75BTtG/vSxUyFgTdU8Mh68i4pOv6qS/tJWQcfcuI3duTZovADcpngV/ 0WUh2bk8LwHHtW3eO8JuZvX9YfSZXA94VYmK E5o5y7U1CXOEwrfbljiGgZR Ge8Bj7u7UzJLqGzVc4 c/.../Vsa8Uid62zifR&__rnd=49cc0ab3260e562fbbdebd19aa220eb7  (the+doors++dvdrip+espaol+val+kilmer,+meg+ryan.exe)

5 / 68      (PUP)
http://bestown.info/bda0934b8bacea5d40b0c9773e7ffbf2/aq_b/dl.php?id=1415215946841887693&r=http://bestoria.info/v2145/lp/?q=Oer3Hf6WN913DcdefAZ992/QgmkLTXrVPE05G7Db2l/iDTvh1 2xG2KQhoeBSiFU2S/f6vQB9BV1z4wlrH1d8luaeoD7K7PPUiGI4X1lyQ2XxJkoqbMcKZ uVHHs6uoNsElWKH4ybarMJPyfHtESAbkoEc9lMdM8w6o8GkHx/cfv5q9ih3Ij1aOIvX5rutliAfpmt/Wg2VKx8CuqfWyNb9hJJk qXoXk6 fZz426/.../HwzBSFKt&__rnd=87c872f5770245ce20574100c203dc20  (download+book.exe)

1 / 68      (Adware)
http://bestown.info/1f1c4e03d77d661ac023bf2cce92e073/zonabaC/dl.php?id=1415114801930208424&r=http://bestoria.info/v2967/lp/?q=Jwy0Jrukq4t30ABCDWPQzYBIINQbYLiiIxSIpzgLz Tqud1Q pjQQpqWnOXgaWWFrWHJ0PwOvsh6WYuuT8T1Kp MH53nQHKcWmmhy4zaRW4ZGwHgizZm/zmv9sM/0jmJaTHjKRVU3BNpsefo07CbbSLZcOMbehUOz6QIBtAZnxdHX dl29VpbuVO Q8xjRVRPSojEc0BiDc4rWP2lsh5tX9mrVvULfCbaUDdcL0PRqvUvW2aSwft0BWjTCh4jjzwYHlKj6TLTqs7xdfgEQNjLws//tdAeLfPET6qib69Nq2hCVCoHliJYagkbMMLMXnM6gwkTq16ut3BWW6qQMkoPBXlAEFQmnWFoHlPW3146VLE473Lj9zrYnqS4JuZqNklFdPYbk9nbWJw37ShFsK5VizBXC7eeTGyCvaBzaStPspn/.../zl75JR8bZdej&__rnd=17b4d01df3712400a515bd834a1cbc7e  (thundercats+serie+completa+latino+mp4+mediafire+2013.exe)

1 / 68      (Adware)
http://bestown.info/93a80354d5fc2fd10f428d980e74a7aa/zonabaC/dl.php?id=1415197168126811614&r=http://bestoria.info/v2967/lp/?q=0VRrn1FqeL uJLFHwym/UWhdoeDwgHY VXudM2UkDomg Lsy2rQV/QpvI014CmGjPH uAlnNZZvvvkComXIaNw3570 WujxSrYkpqV olJ6AQnGIlLud2OBMwxT1E5ksgQ9N6PDo30AqXDaHw5yVVYZys3h4RtGa42lKlctHgbBr2L/tLCptP0WuWFBwXSoz14GPpZqHmjozc9FMlLHNhu47a4HOCVGgLKpUjmEx5fwspBManI69ud0Zoec71FP86CH80sj/yymrY hDa2NiXUqYeLuM0Y qwU47xvqN5vMC5C8sPfkk3bA9u/RbjRV5sQOOlST1F6bUhOFNcpzWGgQeWtng46aqT1fCKk5Yjm7bxVL q0d biHyzhNRk zWREaS7nR ARQ/68kiQ8b62CW0JR6cRTUmI/hlkbxGiBNIiwTCFtr8XVJ9K47TE5jvn6 /XSmz4zJ6dWdU6cLT6GK doMqy h/.../56hVXQ&__rnd=8c083a4dc23029b84bc3791ae6b88f78  (easyworship+2009+full+con+parche+a+espaol+++biblias+nuevas.exe)

1 / 68      (Adware)
http://bestown.info/3e2635145ebee2c458800c4bc1055d7d/sapez/dl.php?id=1415236301646903158&r=http://bestoria.info/v3482/lp/?q=k5r3HAXMsi0H1rpnikds4RNXNRfDs8Csr/.../2F2ud7KQL5XyBV1PtfuGZ23bvMqZL3MfuYodjHCcvyw3fE3da0Lyv1nUJwNAtBOK35 gWBf6u 4LGUrXZpCicTqT5JcPjCu 7PDaD7vm SBuT3Lzeb6AC IyW1FeT6oCtfH6IBqXdCvY3tzsVhvqF8w6VUojiPrVdaNG4BEvL EHODENoc42 ru&__rnd=aaa6475710bb5b8b400c1e4921f6976f  (paypal+money+adder+2014.exe)

1 / 68      (Adware)
http://bestown.info/9761e0ef374897f816d477d2e4aa8303/webfuba/dl.php?id=1415108259329809780&r=http://bestoria.info/v3933/lp/?q=5JOtqolh1r4NR/XZTVEz55xKqcGvQyTpAOVcDRAOa9ZsGxlUHZVqkKwIc/CvWJblT15Bym3uuCc4qYsqnhmRohZg1a8cw0kqBLMYbD5Q mJHtX2Qg32S8xtuf1/37ny49CbjemQ/PwXrdkDkWbxI4QVrm7hB19a8qYt4fT7k78ucm94AVMkAI1UvAduN5Kcfyx8x0laXupp4Ii9KRPg/WTGzdQT5RnLUhjk/ qyArtRrtBWijPJwi0MuXBvQpcrMG8/cEapHKotFKent3Ol8qSKwGiGcPQe6iwLKVWyTKpKli4PLUYRH/.../ IlNuI RAqTE10a fabNNirdGFG80wXdCctYcCgrp&__rnd=67aa58b881bb7db37db081a3877e858b  (activar+y+validar+windows+7+-+loader+2.2.2+by+daz.exe)

1 / 68      (Adware)
http://bestown.info/d83732d5ceb70df7ac64eb2af96f3b88/webfuba/dl.php?id=1415108318039123241&r=http://bestoria.info/v3933/lp/?q=sw1/.../UcE8x6NR gjD4YEwE1JcLVPF&__rnd=ca55431bda0003fd881b313103c6ae33  (programa+full-crack.exe)

1 / 68      (Adware)
http://bestown.info/fe423777a1ea29e3a24ec67054ac9b0c/Ari2000/dl.php?id=1415192188468052427&r=http://bestoria.info/v20494/lp/?q=HNy0Jvzhm0hEl01234Dno/Vt0X8Q5SPYEB pg8aeLnwooDhjbnDpGsZlit8c59AaFzMbqMcdy4n7iCm9oGdR0ZcqWbLAsC2aUY8n Mpv0BbfBjWA01GdP3U080AdAFeOzTlwCtnEubA9rfigaX/.../KUWg3STmQHkoBKgCbVEJQYVriOKLigzl7z3HZ6u2ilo31HB&__rnd=5b1e38428bfacc89f0a525995d75ba5c  (neighbours+from+hell+2_+on+vacation.exe)

1 / 68      (Adware)
http://bestown.info/68dfb5765a27e306f15d3f991c984a5e/sms/dl.php?id=1415186954141606393&r=http://bestoria.info/v3538/lp/?q=lfdSMZ0cofKLH6789/OOPNznAHMLV y/X7nO3DC/QyxZnx4kl/Yj6cIi Mw0L5 tuJw4uS4CUoLNuCBVNutzsMefKVGOH8WErByuHWCmJjt2 5pwCe3OPCrLfsNH7f FUgFMkKKb85jthh15Vb4f3diUXxiv2FORA2FNbuVuHFUCTBVb6YeW4NRdiQrcFDKQlLOaLdaKmUzWuahhuht/o 0ln8OtI31tap9SEuZ6J8thXWovI0JcisCTftjuNNHRRG0fa6hcWUyEkshMPYcdwcLKB4LqFxXlcGUxOdb1IiOmL0BbMvrB0fcGFKrTfituPKnspqthZfZmm7JZmCgGOl6jpJtOC/.../XNo Zkvdp8XlECQ6lP20XWfCOjEz7jm9IXdzX9ZGr48oqxoyT9h01DzuFl&__rnd=c184b9c753fcf2d475cd6bc55be37fbc  (free+download+pes+2005+full+version+iso+pc+game.exe)

1 / 68      (Adware)
http://bestown.info/8f7a74e1a3a3d8cd9bcea377d9e6be95/DFS/dl.php?id=1415181396434731666&r=http://bestoria.info/v1917/lp/?q=2Eg8/qqiJdkmdXZTVNGvGsUzqhzgCfBI54GXwbQeh3rbjJQBGB8ShIA10kZATb7qoa3x/9vViDa8rWQUvLHhKqDvhRg4TtTHb1aqJmoE0b76 znUthyvlLEhIAJkLThfAdysoEzlz7GyVR4Bqq/5D8zZAG2c0klQKZzbY1m3uxQGbcw5e YhVUK/qbfwEhoMpLg9Pja34MoHCWxu8p Ip /KWqUDGAKcTG172PcVqBI9I6Ri oHBlXjnHZhw5Ea2Iy6fRLIQx/Vtyqr2zK4rWJVtagyhkD/.../ARZMaPeOg 0gTuChF6o00cAhxeMZBVwKpgaTxdeCRtZWDwM9crO4TdmzrDh&__rnd=cb6ba40bd8664fac37f6a14562b097c3  (facebook+account+hacking+software+2013.exe)

1 / 68      (Adware)
http://bestown.info/67c7d1cee646cd714bdc1d6899705c24/sms/dl.php?id=1415194187572613067&r=http://bestoria.info/v3538/lp/?q=6d3ZVWqiHwBOqomjlh5pqnt8jYDJZx5emoaYT5T8KBGPoHlxyDWpVRfCwQ2YrwqFr/EWtHJ32rLIVGPfQM/jjfCMFJuZG6yAaD3v0aoQq6869zaWidlIe7jMj 03x4i9pfQYWRZcsTnQyhZ08NBU9zUNjcAh2GeOzTkyxtq XUzUbTWFuQSiq4HCGNShfol/xh5QNGjMprVp3npZFtsCifxrdI64/sadBODUSeiEa14T4zoaRBQqjv69itEr8T6cUJnOaSZtrcNCOuTmBAZsxnIYbBUpQSu2oFI 5LORVbcB1fzXGAN/dVJgh3epBpnNcCSApkCXsMkm1o4GGYh3SwdfDuf9CLPKRm3F5N/sXl3vabk93Xlnnw2QOJHQUROelIz0CI2O/.../uWPMWvK5eExpv6UKfv059HAWOUrrKrU2IyeeV8oJf CZhqO4UtVv5UlOhu4Go6X3moL1vc4v9VmeOhlR22ZZoEVD9V7hotoEBYxmQoBFQUwKcxL3IDE0wCczZ02eLzBhyQ5CQKPeFUErEAU54EUYenxLWnq&__rnd=d50d49a03b8c71d749ca90f6af7ed65e  (wwe+smackdown+here+comes+the+pain+ps2+game+for+pc+free+download.exe)

8 / 68      (PUP)
http://bestown.info/6397257374df6491575d3f6a5ac47669/sub_nc/dl.php?id=1415268316305049204&r=http://bestorican.net/v3650/lp/?q=SGXF6Dwy/LagcUMOQIyxude zmk49rPCUD8fDnM7RxuHuIG9EJoCutzbgmVFcisxGCb5u79pN8israRHAVJpJVJclLy6qDeQMpF2WruuJqEE2EXxQO7STsYasJuGDdn8skZqxAYyme5bitr09Ujbj9QuDduV6BcTurrglZmsEjG73wGVD/muUGP58CtVfD8t6dFxF874dLFRIucyKNEUeB/XcZLgDMxPk /.../MCNAu7lPZyoAdNqACD9Pa69qZxMmxHQu2rPJy7HO6ax1fRE&__rnd=acfd175e54c0ef974d16bccc04015d51  (da-vincis-demons-s02e02.exe)

1 / 68      (Adware)
http://bestown.info/f0d5317257064a47548f176409e868ac/HLB/dl.php?id=1415145258694831012&r=http://bestoria.info/v3888/lp/?q=2eHk0RFxYgmvt9/.../wQ zizoYkXA3JRC K80 EOvTfHUDVl jymq5C4xnsvo9Xl5PR6dz 7qqUCve6WWqVko27QXoFGYQD6ra9Y lKHOXpXWgg6VNo0TNYOx47rHlHSc0u0O0RStrKnzr55J hQWoN6kV5brzKlzgSV2QQ2IsJHz04vl4CaHLglHuJnMzoK9eHvzFNbvKXhrxHI7Qqy8XPUmK kjzJS8rp2Ie37aRlj3cL1Ga9I7IF&__rnd=e2085367e053e411d177888ea0bb96b4  (deepfreeze(no _).zip.exe)

1 / 68      (Adware)
http://bestown.info/422b8aa6c5d6ad0d9a0cd21b108ad4ff/mejoba/dl.php?id=1415098973455754814&r=http://bestoria.info/v2900/lp/?q=LAp4wWqao eWAztvqo1LX5NhVBWkUhaUmFBw9PDOnGaWaznQM581ZJja6PznCrDtQelEWhnseFY 9AYjb49uxeWcxG3VBMvrfH b1yGqwAj2o0HFcbjzXMW1 booyAN37uznQKHXNKE6kPv1nsIMtfnIRfQ0Fx8UnJLb7YrbtzsM1YQOMb6/5RXpHEoUo Y1naK/.../q8BteJoymY9M1yS8MJjnT&__rnd=555c3785df694e1bc80926a01b81444e  (leiva+-+diciembre.exe)

1 / 68      (Adware)
http://bestown.info/f1e4c93818909e347c99e4909450ce38/identipot/dl.php?id=1415147944932815367&r=http://bestoria.info/v3187/lp/?q=h6bWSedDDK9BMFHwysj4JEociINRzk9nhuB f1LU2VMI0XQJ6ciuHqOzJOGW2MMtFHHtq1M/PtlCcnLTBokQuFHEbTTtdM6eMoShwEQIB9WvR DVtvVwoq5C3ERJccpHJqEw laIhGEu9q7Xz5DoR7UbpLGDNZHWF a8nxe73XJnfKg36faBwcRoaXmM vA77FT/ lcPllpofbbWE4EyjfpaCWBuUzNULEjIo3aIZVJclL 5kCps9Bx/dBvjW8RLNeKxPMYsz5tb5s6X10ZriwI/vyRH9nVqlLJVYgZkEac2ViuK9zbjZFcAEOLpUC/lX2v3cQyGxKJxxVhXyqPQL4kqitTNtMiv1y6MTm8ZNsLT6HFs3EipbIWjyEm0o bT0Jr00jp7cMK4uQDBPGE PI6/fZLlb2D0gAVP6Jsxr/.../j1jPB5 2p&__rnd=35e0258a4112c55c9e5ab7f9162b7ab2  (3995dabaab41b.exe)

1 / 68      (Adware)
http://bestown.info/0b4f184e1ef020306847f3174d2abfde/sspcQA/dl.php?id=1415183148163266698&r=http://bestoria.info/v945/lp/?q=tvqd 7TENZtSaWYSUMFtdVJ0IUWIY8ZsmQlpr1zzge2xTzyXANTPdBAlH5dKRcSD/acJ423oam/.../tx9IY4K &__rnd=278b70fe33511d06a6467ccd34501d66  (download.exe)

1 / 68      (Adware)
http://bestown.info/97f5c1f3a1bbbb2ce73f1a795436784c/webfuba/dl.php?id=1415121531764657797&r=http://bestoria.info/v3933/lp/.../MPY5V 2cU vakG8JNVXFjsVIiLT7cpNxG7mjHE0o5BYi83pnxtAXBYqW4HDwVNoPWVHhynyxfeAP2Yu5M7uzgSaiDcbXccNtlrkWiIm9CfMAK 3KgLxM5vUcCAY 1QryX5STfwIiOyvXB9Wpq20 JjVzy9SLmtswPhy8Ivzkz9I&__rnd=369d11bfd75071bfef6d34ea4e5e327a  (programa+full-crack.exe)

1 / 68      (Adware)
http://bestown.info/ecbd9fec0e84a1346c64c1c1f5e648dc/Ari32/dl.php?id=1415103964973758036&r=http://bestoria.info/v3640/.../?q=3p4TNUAB9rKB923456YB2JFGKtKKTWzY9mqTzJaXVHi1LmjjF8rZ2IADzUmbNYJwFQ0cIdmjWEuc42gx8dCTNyupNKY oKf3Wkket46qFt25SDsF uElLe IbpZlisDkmbqgGGnxjuf8R2uN59 0Npt3Ww3crnIHFcgYE1iWjmsQwjbF79Vcf9sYpmOI4 1xrXGS0dhMLnlhijmhz665jMLVHGy8u0j9iRfeFMmlc 2d8Ns39lvRQEVXSowfYRaT3mPwOm9da07yXwS2zCDqGzwD9Yg4jp0SlqfdQouNrEdUsXpqrsQywRLDmsGFlY7z6lcjVvnJzaMUMmUZRZkA1ADN2Fiji&__rnd=7e11cca969cfaf0f1792b070eb69fb4c  (download+lost+saga+offline+2014.exe)

1 / 68      (Adware)
http://bestown.info/c6ea568b0e03d05f92c8ef0c20d082c0/compucali_nc/dl.php?id=1415152608999822928&r=http://bestoria.info/v3244/lp/?q=wO7P2qqjlQgdefABCDNAb8rVtzlWAVDoT DaDJF9/wQGPH0CSLHgGLAcHwHUDMAH/.../no0IdYxe5bac2xCgB5 UX5&__rnd=c03fc32d1a7570bf45d6ab5a1b36d35b  (megadownloader.exe)

1 / 68      (Adware)
http://bestown.info/c69c2072f2e0667653c6a4997860d6b8/sspcQA/dl.php?id=1415138437514666434&r=http://bestoria.info/v945/lp/?q=K56N1wDJ9aCikg0123Cb55/Qjue1ygwJRHz7ejqwVD8t6zi9f9IZaJxbZLj0jxS9sqzmecdum5K8aN08/PMGusN38ysST4MOrHtS6/.../0VZPFLLyZM7Pr5JDhRtQP0imsg7aQUd950fPUqLASy&__rnd=fe6e920fa1b0bb3fb25d7057ee8c1259  (download.exe)

1 / 68      (Adware)
http://bestown.info/e98ba8955296ab6b2d753c0567257760/affi/dl.php?id=1415189605563630555&r=http://bestoria.info/v3530/lp/.../Gw ING0Sipb20YDaGFC1ijxP1Y 9WQl7dRPBQmlvSNiLY6xvvqQ2o8lWI T7UTJxAXFQp8XijNkyKPTLUTUr19V4s9l68HQiSxwE nGQqMSqv9dSWMQIFBe0vBiUWOOGJb8IE0ZSq&__rnd=b3be9a2c2b03591b8640fe18566d857d  (download.exe)

1 / 68      (Adware)
http://bestown.info/715b5ac36e09891f58045610da52c72f/identipot/dl.php?id=1415127283935707597&r=http://bestoria.info/v3187/lp/?q=9 VyuxWUU020mjlhab7yu3HxZInsVIXVfgUaLTaJ0ewcTCdAkFIX4B3vsGJFX2zOcbKsInO18qUAFirHKFmce/UvdSzV5f0L4OkNKr/KkJwmqBVSh vaKlgVgMfB0vus8EhkPzTUH QBxFJZ6uSV0/KctTR1hRBMrPV TPgfnxvOjrdOyNJmCPGPBlucznE57BNJsLjEKSP6onRL7BMvDLr7opXEmphdbLbA6r5bnEXAg1jWQUoLACThEwcWZdu3YWlDE9/.../RfCh4MHYxUG4HHywKqnOn4YLtpJIROT0k9oGYWBxZBCWtAA2FBj9cqWvD6Dk&__rnd=35d80e34f378865db281f2d7c0b951d5  (descarga+desde+identi+(mega).exe)

1 / 68      (Adware)
http://bestown.info/2dfa1d1a836633873ea73d95517fbad9/identi_ref/dl.php?id=1415127690817110403&r=http://bestoria.info/v3258/lp/?q=RWqd BVJEKvlQFHwysjd7cBfF G85 UMD3fqkDJV1/.../wK0UJkCP4E4ILnuskJI5NeJWonO8jrZmWyldmStVZGmMuwTx1&__rnd=4ed4309d6ebe19942a34cd15556ab42f  (f.exe)

1 / 68      (Adware)
http://bestown.info/e4bab946b6dd5fe2d9caee79d7259468/identipot/dl.php?id=1415127744690103317&r=http://bestoria.info/v3187/lp/.../mwY8YhOEn8iYFztMU1RxKi0dHmlnvN0QqNKzGTPeupFAmvkKKX8eYM7cArQYkY8FwglIdecUUlytP2yfZXmhG79XdvDB8KoUQ93aGzQG4flML4fwE66ulz6f2YcVyPq2omumeaeBVAMVWGeH 99vdl7u2xr0hSKVRwInDomkO8MnuQNl2 f62LmMH4N 88tecXRzrsCmq57SynIw 7H6kmORxbERkyf4GzMSmo1LHa7hPYSvd2z 58Pnuhv7GsragE7TJqQNB1JtUk8nIpRTJ xSJjeT6dNIPl35K8DpMTPMoUuclaEzFaQ7uhgN2xxqElAhjL&__rnd=f403db5f5c2fdd13dd75e329b74c1629  (tuneup+utilities+2014+full+(mega).exe)

1 / 68      (Adware)
http://bestown.info/852036010c6d0c717806a14925ca4d26/Dovo/dl.php?id=1415226315439876460&r=http://bestoria.info/v20495/lp/?q=T3LnkDzjNvEwCIKEG plY8iwi4 aMPE3igA6X5L5cYB0Z5bOEjHLYdfx1mQI42gEQGivtvuooiye3pOOdBbXTWWdnZxzmGfneM8ZVTT8IbDvE1iHmCs8t0GIyZKbFKl uZK0KRG1lq919v6mhPLpvQ2z8Wau9uN /.../Nk8ny2h&__rnd=7a7e16fd1c8c7a644ed8e9d25bcc1c47  (moto_e_twrp2.7.2.0_v2.2.img.exe)

1 / 68      (Adware)
http://bestown.info/83592a8fa2513d0090bd69528f411e36/tveva/dl.php?id=1415240884292370515&r=http://bestoria.info/v3608/lp/.../q2b4TDAAWwcAUcoejnD4tnNGEr9cqElOmL5V6swN3LLn4EmEJbbJQOqIUzndPa04KxnbieDcz3w3h3diap89kjoFfJp2TS41whMWlvqiyFYP2zWQ&__rnd=802995001041f3aa0fe484c84a7bb204  (download.exe)

1 / 68      (Adware)
http://bestown.info/caee9f05fbc9c31c935c4d9f7641f59a/falashi/dl.php?id=1415187571403773555&r=http://bestoria.info/v20662/lp/?q=Su09Xj7XFBkIWYSUMOHqMo0teL5WgWDfKRxqreDCZEDaZ/IYWxQG zjZYLHgy4lWiwHzKtyYMkUkEWrnU5kiSyI8c/.../TEf9xuumzXP72h9ka7TEkmB7Z238zo0BkzfgcwU0G4KybLaJy3jlopTf3ozUX9iD h7SXlntlY9fNJUDh2bdA12Z8F3aUSyxq8zwAhMUW yXOZz Rd71A2&__rnd=348614ce516be10cd84ff40e4dfda268  (flashvideodownloader.exe)

1 / 68      (Adware)
http://bestown.info/09ecd236b37d69b6f93433a672d356e9/identi_ref/dl.php?id=1415154777717511434&r=http://bestoria.info/v3258/lp/.../4PsUKVqtSfI1T2VxVZYkIFwTRYhD6j15STLY5KFSAo9kaHaRfC5fnKLZgN&__rnd=758ae215cfff72e4f1c51a175d16ff31  (f.exe)

26 / 68    (Adware)
http://bestown.info/8a6444a58b5864949c7b0ada1413b131/never_2/dl.php?id=1415236468011438501&r=http://bestoria.info/v20412/lp/?q=tcYGAXnedsdzwomjlh5pUZybSsxRPZf1y158nlbKmoLqHcpV1ZLZcqWEGB9co8AB/OkyN3nVLcqqy8NUCn jX9uYEnUYwOrKgmsZ6yBse5 3disQXjbgsEHn8rLS0d2CMvTF/w8rX4QFSivEFB65rA0dnOmUWeIPb5kpd1nCeVPpWlovvMgjjVaWmeahpF7AAwHHB2Pdhu8krsadvWSWZwEMeZRF42yZ9PwX2qGPKfi1g/vnKDACm94UZ5nqd7DvScSprLG9XCZskTI29P/OPzn8fcfDf1VtjQtKaVHyxZXkW4mK5z7TEfokDlfqdivU1A/.../4ho3WP Dkpa Sgv8&__rnd=820ebd6129e4be66ef6b7edcb03c8dfd  (teenage+mutant+ninja+turtles+.exe)

24 / 68    (Adware)
http://bestown.info/3ab5643b5ed5066c8695de1863e9237e/newari2/dl.php?id=1415178754174912563&r=http://bestoria.info/v20668/lp/?q=5Dk79xWNkFVWlhabcd93 WobesLzkuA6VBealS9id7Vdal/MJJzox8mC2U47y9dP1i3NOvT34ZJApljzr 6c 2FDbqoNUNK8uE6HRDe1V zWOmbBmJuU81BJ2FPK4i4njjr0LTU3Y0GI9tf9RoI81e/ z4E609/RhruS0FExPjr xb7 0EkRw9f7czNEE8BzsyThMBM6SOmSI1PzZ6Si5Xjr9P/cROEhpEPP47kqis9H0KJap4BBUOWEH864VBlyIRhyLzD9gR2GJ3TEE3O8k77GLQfTYmye8/fYD1/.../iflXsRu1&__rnd=c78ef21e04b00291f801fa8e87089076  (kj+permanent+activator+2013.exe)

 
Latest 30 of 48 download URLs

The following 3 files have been seen to comunicate with bestown.info in live environments.

TCP » 54.69.104.255:80
tmp781a.tmp

TCP » 54.69.104.255:80
tmp5600.tmp

TCP » 54.69.104.255:80
tmp61f7.tmp

URL:
http://bestown.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=sni49660.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
ngx_openresty (PHP/5.4.37)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.