teasoft.co

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain teasoft.co is registered by proxy through GODADDY.COM, INC. and was originally registered in September of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, INC.

Server location:
Arizona, United States (US)

Create date:
Friday, September 5, 2014

Expires date:
Friday, September 4, 2015

Updated date:
Friday, September 5, 2014

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.OOOAlians.R, PUP.installCore.OOOAlians.Installer (M)
100.00%

Dr.Web
Trojan.MulDrop5.38502
50.00%

ESET NOD32
Win32/InstallCore.TU potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4150696
50.00%

Sophos
PUA 'Install Core Click run software'
50.00%

nProtect
Trojan-Clicker/W32.InstallCore.780160
50.00%

Zillya! Antivirus
Adware.InstallCore.Win32.267
50.00%

K7 AntiVirus
Trojan
50.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dfglko
50.00%

Avira AntiVirus
ADWARE/InstallCore.Gen9
50.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
50.00%

AVG
Generic
50.00%

ESET NOD32
Win32/InstallCore.QH (variant)
25.00%

Clam AntiVirus
Win.Adware.Installcore-569
25.00%

The domain teasoft.co has been seen to resolve to the following 2 IP addresses.

ip-184-168-221-62.ip.secureserver.net
January 14, 2015

September 10, 2014

File downloads found at URLs served by teasoft.co.

The following 59 files have been seen to comunicate with teasoft.co in live environments.

 
Latest 20 of 62 files

URL:
http://teasoft.co/

Title:
“TeaSoft - Free Software Downloads”

Description:
“Download free software. Safe and 100% virus-free. Software downloads, tutorials, and much more. The website created to help you enjoy the best software.”

Web server:
nginx/1.2.1 (PHP/5.4.4-14+deb7u12)