» ttb.4u7ynbh3y0.com
Overview
Analysis
IPs Addresses (1)
Downloads (27)
Website Detail

ttb.4u7ynbh3y0.com

Whois Privacy Protection Service, Inc. (Proxy Registrant)

Domain Information

The domain ttb.4u7ynbh3y0.com is registered by proxy through NAME.COM, INC. and was originally registered in December of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.

Registrant:

Whois Privacy Protection Service, Inc.

Registrar:

NAME.COM, INC.

Server location:

Nord-Pas-De-Calais, France (FR)

Create date:

Friday, December 19, 2014

Expires date:

Saturday, December 19, 2015

Updated date:

Friday, December 19, 2014

ASN:

AS16276 OVH OVH SAS,FR

Root domain:

4u7ynbh3y0.com

Whois:

1 4u7ynbh3y0.com record

Scanner detections:

Detections (96% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.VideoPluginsoftwareSL.F, PUP.Installer.Softpulse, PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.Softpulse.Bundler, PUP.Softpulse.VideoPluginsoftware.Bundler (M), PUP.Softpulse.VideoPlu.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse (M)

100.00%

ESET NOD32

Win32/SoftPulse.U potentially unwanted application, Win32/SoftPulse.S potentially unwanted application, Win32/SoftPulse.V potentially unwanted application

30.77%

F-Secure

Riskware.Gen:Variant.Application.Bundler, Riskware.Application.Bundler.SoftPulse, Gen:Variant.Adware.Kazy, Gen:Variant.Adware.Symmi

30.77%

Dr.Web

Trojan.Domaiq.43, Trojan.Domaiq.41, Trojan.Domaiq.52, Trojan.Domaiq.101

30.77%

Lavasoft Ad-Aware

Gen:Variant.Application.Bundler.20, Application.Bundler.SoftPulse.P, Gen:Variant.Adware.Kazy.494185, Gen:Variant.Adware.Symmi.49537

30.77%

VIPRE Antivirus

Threat.4150696, Threat.4783235

30.77%

Clam AntiVirus

Win.Adware.Agent-34581, Win.Adware.Multiplug-33061, Win.Adware.Agent-35419

30.77%

McAfee

Program.SoftPulse

30.77%

Norman

Gen:Variant.Application.Bundler.20, Application.Bundler.DomaIQ.V, Gen:Variant.Adware.Kazy.494185, Gen:Variant.Adware.Symmi.49537

30.77%

Sophos

PUA 'SoftPulse' (of type Adware)

30.77%

Kaspersky

Trojan.Win32.Agent, not-a-virus:Downloader.Win32.DriverUpd, not-a-virus:HEUR:AdWare.Win32.Generic

30.77%

Bkav FE

W32.HfsAdware

30.77%

MicroWorld eScan

Gen:Variant.Adware.Symmi.49537, Application.Bundler.DomaIQ.V

30.77%

Malwarebytes

PUP.Optional.Plugin, PUP.Optional.SoftPulse

30.77%

K7 AntiVirus

Unwanted-Program , Trojan

30.77%

The domain ttb.4u7ynbh3y0.com has been seen to resolve to the following IP address.

5.196.157.0

February 12, 2015

File downloads found at URLs served by ttb.4u7ynbh3y0.com.

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../43xwlt0O?__tc=1420393295.649&lpsl=5a1c9a381a6aba0b530eec489cfe469c&expire=1420479688&PubID=007388757&slp=www.getksoft.com&a=2&ClickID=007388757018059252484&fileName=Player_Setup (player setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../009ng9ey?__tc=1420395375.525&lpsl=b90ba4768055efc0280cb6f29169e79f&expire=1420481769&slp=www.mysoftgreat.com&ClickID=54a9836851875453848b458c&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../oE8FiZSg?__tc=1420392278.131&lpsl=1a0ae9fe81ff1fb6eb7c82ac785eb0d0&expire=1420478662&slp=www.mysoftgreat.com&ClickID=54a97742409b5099518b458e&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../yHCbgK2l?__tc=1420413684.843&lpsl=9e46a21e5f083d64b545a0110efe9f82&expire=1420500070&vurl=5752&dp=-_-Yjc4ZF8xNzNfNDcwNl80NzQ3X0FSXzE4MS4xLjEyMy4xMTNfZWM4XzUwOTVfQURT-_-ADSYS-5cb67395-9468-11e4-8e57-cb2ca2013c8f&slp=www.greatprglist.com&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../dAXAa0iQ?__tc=1420393133.739&lpsl=a79aef5c67ab39593625f6257c02daa8&expire=1420479542&PubID=52ba0f906d47cd1135000001&slp=www.greatsoftlist.com&n=Cyberbully 2011 DVDRip&zt=52ba0f906d47cd1135000001&ClickID=&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../dAXAa0iQ?__tc=1420393045.232&lpsl=3049708f9d414b812596445d196079ff&expire=1420479451&PubID=52ba0f906d47cd1135000001&slp=www.greatsoftlist.com&n=Cyberbully 2011 DVDRip&zt=52ba0f906d47cd1135000001&ClickID=&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../oE8FiZSg?__tc=1420417697.789&lpsl=8f99140ee6edcc42c3b1a0e5d13774a8&expire=1420504059&slp=www.mysoftgreat.com&ClickID=54a9da7952f8d0f8348b456c&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../oE8FiZSg?__tc=1420418440.368&lpsl=8f99140ee6edcc42c3b1a0e5d13774a8&expire=1420504059&slp=www.mysoftgreat.com&ClickID=54a9da7952f8d0f8348b456c&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../ABbApjzh?__tc=1420395332.539&lpsl=fbac558cb45cb094122b58698abf6182&expire=1420481660&vurl=6644&dp=-_-NzhkYV8xNzNfMzM4NV8zNDI0X0JSXzE4Ni4yMzMuMjI5LjgzXzU0Zl81NzYzX0FEUw-_-ADSYS-7faf94ac-943d-11e4-a46b-a8a297d4e8b6&slp=www.greatprglist.com&fileName=Setup (setup.exe)

0 / 68

http://ttb.4u7ynbh3y0.com/download/request/.../oQ7wBgrC?__tc=1420401389.795&lpsl=d51a968d641def1a911a287ca46a4adb&expire=1420487784&PubID=150046&slp=www.thebesttopfiles.com&ClickID=ams1CIqnnp2GwIGFXhACGM_nyML_xaGoRSINODMuMzAuMjM0LjEyOSgBMN-1pqUF&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../q6tlUV5n?__tc=1420389734.412&lpsl=5444a5c232833bfb64e6de1d656e5e18&expire=1420476126&PubID=5744_5367_4621&slp=www.topfilesbox.com&ClickID=9185727937&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../xyVYKGVX?__tc=1420451734.643&lpsl=8535da9c314a1481ba609d7a67046d6d&expire=1420538160&vurl=9643&dp=-_-OGY0Y18xNzNfNDA3NF80MTE1X0VTXzE3Ni44NS42Mi40NV81Y2NfODIzNV9BRFM-_-ADSYS-09e4cf76-94c1-11e4-b5a2-dab5626dd9db&slp=www.greatprglist.com&fileName=Setup (setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../r8PpiAy3?__tc=1420434362.907&lpsl=b5c46eb7415b2e561da4c6ff07d09a24&expire=1420520758&PubID=36151202&slp=www.greatzsotf.com&ClickID=tDeZlGRTh920QfkHcjIvPGcbRdRV1yccgM5lloCbHwdVKaE-pXW9EDjihG11jneiDHkOMGinwA5H3OD1i_0sDKZzNyW3_XaCSBJOjz6QGvOqKTunK-s-lTL-XVEjBTZMJpmACgXXhZASQ_lo_n2sPrcVs0s3qbYfRsS0eJcdKX5ewG_pOrGmtx1mRioiP7js3sTi3m8Scfj2LhyM1d-Y8-gdk6oQ0sQL2kVgDZX5Qmr-UTVYr35wK6xdePGDGWAWnWfbK3DnvDeAIu95gg9C0QkO6o02ffKXzneU7IQ3vzlrMLoPkLKCmyCMnxV10ouHpkMo13pWuVJp6J_NIpfny0OWMdu1kJGIgNVz-c9sO4g1FH0h_1IcsBXigDS0n1ybX5_wNzRykNsc7D-tMZcavh9QiA&fileName=Player_Setup (player setup.exe)

1 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../ABbApjzh?__tc=1420424911.415&lpsl=0b621384b5b003c1e48a9e57607bff59&expire=1420511269&vurl=10709&dp=-_-YmEwZl8xNzNfMzM4NV8zNDI0X0JSXzE4Ny42Ny4xODEuMjA4XzkyZF84ODg4X0FEUw-_-ADSYS-7075dd2f-9482-11e4-b152-fbae43513ace&slp=www.greatprglist.com&fileName=Setup (setup.exe)

39 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../43xwlt0O?__tc=1420397373.432&lpsl=759c4158b7f8c01fc0f9166976e5d9c1&expire=1420483748&PubID=009001207&slp=www.getksoft.com&a=2&ClickID=009001207018062586991&fileName=Player_Setup (player setup.exe)

35 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../ABbApjzh?__tc=1420420785.654&lpsl=e0a8456789d3790a06a0faaabb50da03&expire=1420507184&vurl=4802&dp=-_-OWRmZF8xNzNfMzM4NV8zNDI0X0JSXzE4OS4xMDcuMjI2LjE1OF84MTZfNDI0MF9BRFM-_-ADSYS-ede2317e-9478-11e4-a46b-faa4e8edaa7f&slp=www.greatprglist.com&fileName=Setup (setup.exe)

39 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../nskmbt53?__tc=1420412700.687&lpsl=9e67d047609cc0b748c55353213a6425&expire=1420498915&pixelid=nmx1HcIrikMPB-WN9tcMt9OCT_q16gc9IfzSXPTtNceyLPSnhzhhQRvTEDoCJ-4z5wmSeloaM_r8H26HqasxkY-sHTx6Qkejp7HyfpV4180APrlNAi1H_6TQP4nn2b_kqGn6m3Vp7M2299h-JpWApyxZby47u6n5xYjZ6krulYa9p5TWseziCwQBhZgUufsvuSTQDGn6Xj1UzFJYy4fpP3aDnlYNpvcwXeR-v_z8_UNKfVyBhu0olKiPeZTN&slp=www.yourgreatprg.com&fileName=Player_Setup (player setup.exe)

38 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../N8V0Yoxq?__tc=1420427271.405&lpsl=6247f9b8bc27ba57a0c98e967938990b&expire=1420513664&slp=www.allgreatsoft.com&ClickID=a5a2fe0da42d41a8889051fe53411a13&fileName=Setup (setup.exe)

34 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../N8V0Yoxq?__tc=1420387335.606&lpsl=55061ca7d6edf11d7c181e3523a8385d&expire=1420473726&slp=www.allgreatsoft.com&ClickID=87822b6668574fbc87a5aa2353c9e39b&fileName=Setup (setup.exe)

38 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../43xwlt0O?__tc=1420371360.211&lpsl=cd8a040474f0cce3ad59dcf8aa70e8ee&expire=1420457776&PubID=010049014&slp=www.getksoft.com&a=2&ClickID=010049014018042563534&fileName=Player_Setup (player setup.exe)

34 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../N8V0Yoxq?__tc=1420386473.906&lpsl=3746a6a117ecd3ce21fba1b5e933e2ff&expire=1420472864&slp=www.allgreatsoft.com&ClickID=d8e7e926c8b74f36a55e54f3db7c55bd&fileName=Setup (setup.exe)

32 / 68 (Adware)

http://ttb.4u7ynbh3y0.com/download/request/.../oE8FiZSg?__tc=1420425631.274&lpsl=b508953bf8af31d4e4627217033526a6&expire=1420512022&slp=www.mysoftgreat.com&ClickID=54a9f9943f2ad4e9328b459f&fileName=Setup (Setup.exe)

URL:

http://ttb.4u7ynbh3y0.com/

Web server:

nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.