home

real-to.info

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain real-to.info is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
2 real-to.info records

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.NewMedia.Installer, PUP.installCore (M), PUP.NewMedia.Installer.NewMediaHoldings.Installer (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.Installer.Bundler.Installer.Meta (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.installCore.Program.Installer.Meta (M), PUP.InstallCore.RE48 (M), PUP.InstallCore.RES (M), PUP.NewMedia.NMH (M), PUP.Installer.Bundler (M)
100.00%

VIPRE Antivirus
Threat.4786018, InstallCore
23.81%

Dr.Web
Trojan.InstallCore.152
19.05%

Bkav FE
W32.HfsAdware
19.05%

Malwarebytes
PUP.Optional.InstallCore.A
19.05%

K7 AntiVirus
Unwanted-Program , Adware
19.05%

AVG
Generic
19.05%

ESET NOD32
Win32/InstallCore.ZM potentially unwanted application
9.52%

Sophos
InstallCore
9.52%

G Data
Win32.Application.InstallCore.EG
9.52%

Baidu Antivirus
Adware.Win32.InstallCore
4.76%

Panda Antivirus
PUP/Multitoolbar
4.76%

avast!
Malware-gen
4.76%

NANO AntiVirus
Riskware.Win32.InstallCore.dsgvyn
4.76%

McAfee
Trojan.Artemis!B9A4E7279DF7
4.76%

The domain real-to.info has been seen to resolve to the following 5 IP addresses.

54.88.93.196
ec2-54-88-93-196.compute-1.amazonaws.com
February 12, 2016

54.88.203.136
ec2-54-88-203-136.compute-1.amazonaws.com
January 28, 2016

54.84.209.207
ec2-54-84-209-207.compute-1.amazonaws.com
December 25, 2015

54.165.29.156
ec2-54-165-29-156.compute-1.amazonaws.com
June 19, 2015

107.21.41.152
ec2-107-21-41-152.compute-1.amazonaws.com
June 19, 2015

File downloads found at URLs served by real-to.info.

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=AjCdOT74Njn4Ag==&osos=VdluDrW3cw==&dr=cHaWck10DK5t2mll2dVyvExthXN3DKV0NSDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8RNz7FOTgwOTnm7K2pDZ1fAZnwAj74Aza0Ag==&pd=2323UmDyDKVBDK2l mxPcECu7dWt&campaignId=9jn0AzM0ATAyAZMq  (teamviewersetup.exe)

0 / 68
http://real-to.info/?dl=1&pi=Azn1OTn4NzcFNM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWxVAm7dREhKVuvmAWASDChTMm7dlChV8wAZM4AZMROTnm7K2pDZ1fNjgyAzMyNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AzARNjMwAZMq  (apache_openoffice_4.1.0_win_x86_install_en-us.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=Azn1OTn4NzcFNM==&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWxVAm7dREhKVuvmAWASDChTMm7dlChV8wAZM4AZMROTnm7K2pDZ1fNjgyAzMyNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AzARNjMwAZMq  (openofficesetup.exe)

1 / 68      (Adware)
http://real-to.info/?dl=1&pi=AznzOT7wAZMdAw==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8zNjC4AZMROTnm7K2pDZ1fAjL4NZnzNTnyAw==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AzM3OZcdAZMq  (firefoxsetup.exe)

1 / 68      (Adware)
http://real-to.info/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXz7zAzAzOZMFASDPDdlChV84OZgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajc4AzLdAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLFAvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNj7zNjC4AZCRvm5EIKiWXzn4AzCzNTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0AjgRNTa0AZMq  (popcorntimesetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=ATMyAzL1NjMRNi==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1m H7tcrRPeKVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXziwNj73OTMFASDPDdlChV8zAzcdAjgFAZaz&pd=2323UEVw rWPDk1z dD0UmNJ i==&campaignId=9jn0Azi0NzayAZMq  (welcometotheflvplayersetupsetup.exe)

1 / 68      (Adware)
http://real-to.info/?dl=1&pi=AznyNZidATCwAM==&osos=VdluDrW3cw==&dr=cHaWck13 3vBDk1JDQ137Xvjcm5m2kD0 T1z2dVl2Zamc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhL5SvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNjARAjcFAZCRvm5EIKiWXz7zNjidNzgwAjA=&pd=2323Umluc3xP rwt2XMu7dWt&campaignId=9jn0AzMyNZL4AZMq  (worldofwarcraftsetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=AzL3Aj73NTnFOi==&osos=VdluDrW3cw==&dr=cHaWck1tDKxp7S1i r5FDXam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhLxUvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNZMRNT7FAZCRvm5EIKiWXzMwNjM0NZcwAjA=&pd=2323Um2J dit7XswUmNJ i==&campaignId=9jn0AjC1AznyAZMq  (windowsmediaplayersetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1Q HVlc3xP7dtzvExthXN3DKV0NkDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWxVAm7dREhKVuvmAWASDChTMm7dlChV80AzL4NzgwOTnm7K2pDZ1fOTgdOTa4ATa0Ag==&pd=2323Um5wcHAt mV3UmNJ i==&campaignId=9jn0AjcFNza0AZMq  (bluestackssetup.exe)

0 / 68
http://real-to.info/?dl=1&pi=ATL4NzcwAjc4NM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1C7KVt d4t2rWJ HAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vVkDj rcWDK4m7z0RvmiWAkDjIKiWXzCyNZn1OTMFASDPDdlChV84AZCzOTcdAZaz&pd=2323Um2J ditIKFz2r5B kFj d0=&campaignId=9jn0AzLzAZc0AZMq  (pdaemontoolssetup.exe-setup.website)

1 / 68      (Adware)
http://real-to.info/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzCFATL0OZMFASDPDdlChV83NTM3OTaFATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjgFNZi0AZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=ATA4AzCzOTM3AM==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDEam7dAWxlam7dREhKDyvmAWASDChTMm7dlChV8FNZnwAzgwOTnm7K2pDZ1fNzn3AzayOZn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0Azn0AjAwAZMq  (firefoxsetup.exe)

13 / 68    (Adware)
http://real-to.info/?dl=1&pi=AjC4AZMzNjn3AM==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXz7zNjazOZMFASDPDdlChV83NTiwNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Aza3NZMdAZMq  (GoogleChromeSetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=Ajg4NzcyAzi3Ai==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhXs0vmNjhLvSvmNBDz1w2kDjhTnmDZ0wvmNpDZ1fNTAFNzg4AZCRvm5EIKiWXzn1OZgyNjayNZa=&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjCRAZ70AZMq  (minecraftsetup.exe)

9 / 68      (Adware)
http://real-to.info/?dl=1&pi=ATA3NZM0Nzi3Ng==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWL0Lm7dREhKVuvmAWASDChTMm7dlChV84Nzg3AzgwOTnm7K2pDZ1fAZcyATaROTn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AziyAZiwAZMq  (FirefoxSetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=Ajg4NzcRNZAdAi==&osos=VdluDrW3cw==&dr=cHaWck1w 32lcEsJIKF0UXDpDX2lcQD0 T1z2dVl2Zamc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOTCzNZA4AZCRvm5EIKiWXzL4NznRNTgRNZa=&pd=2323Um2l2k11cdLu7dWt&campaignId=9jn0Ajg0NjMyAZMq  (powerpointviewersetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=AzA3AzAFAT7zNi==&osos=VdluDrW3cw==&dr=cHaWck1E2r5fSVDfcd5uXd5uDHvl7XAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1kLQDj rcWDK4m7z0RvmiWAkDjIKiWXziyAZcFOTMFASDPDdlChV84NzLwATnzATaz&pd=2323Umtp2dCtc3VuUmNJ i==&campaignId=9jn0AzMzOTcwAZMq  (gtaivsanandreassetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=AznzNzczOZcdAw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1mIXvlDmW4vExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8zNjC4AZMROTnm7K2pDZ1fNzM0NznzNTnyAw==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AzAzAza4AZMq  (firefoxsetup.exe)

1 / 68      (Adware)
http://real-to.info/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWcHim7dAWilam7dREhXs0vmAWASDChTMm7dlChV8yAZAFAZMROTnm7K2pDZ1fNzC0AZAzNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AjCRAZa4AZMq  (openofficesetup.exe)

1 / 68      (PUP)
http://real-to.info/?dl=1&pi=ATaFAT71ATnyAg==&osos=VdluDrW3cw==&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AzndNTcwAZMq  (minecraftsetup.exe)

9 / 68      (Adware)
http://real-to.info/?dl=1&pi=ATi0OZnFOTiRAw==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1wDr7tcmVPDrVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1OTkDj rcWDK4m7z0RvmiWAkDjIKiWXza0Nz7yAZnFASDPDdlChV81NjM3NTMdATaz&pd=2323Uml0UKD1 QFj d0=&campaignId=9jn0AziyAZM0AZMq  (pdfreadersetup.exe)

9 / 68      (Adware)
http://real-to.info/?dl=1&pi=ATAyNZaRAjiRAg==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzcwOZazOZMFASDPDdlChV81NTcwNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzAzAjc0AZMq  (googlechromesetup.exe)

URL:
http://real-to.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.