p_descargar-mp3-es_ares-plus.fitraburedma.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain p_descargar-mp3-es_ares-plus.fitraburedma.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in December of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
SOLUCIONES CORPORATIVAS IP, SL

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Tuesday, December 30, 2014

Expires date:
Friday, December 30, 2016

Updated date:
Monday, November 23, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Onekit Installer
100.00%

Trend Micro House Call
Suspicious_GEN.F47V1127
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.135D0B5B!324864859
100.00%

Dr.Web
Adware.Downware.2227
100.00%

McAfee
Artemis!303BD11E4F1D
100.00%

Baidu Antivirus
Adware.Win32.InstallCore
100.00%

Reason Heuristics
PUP.OnekitInternetSL.X
100.00%

The domain p_descargar-mp3-es_ares-plus.fitraburedma.com has been seen to resolve to the following IP address.

ns3014179.ip-149-202-192.eu
February 29, 2016

File downloads found at URLs served by p_descargar-mp3-es_ares-plus.fitraburedma.com.

The following 40 files have been seen to comunicate with p_descargar-mp3-es_ares-plus.fitraburedma.com in live environments.

 
Latest 20 of 41 files

URL:
http://p_descargar-mp3-es_ares-plus.fitraburedma.com/

Web server:
nginx

30 of 39 related domains