Download
Community
knowledgeBase
» ttb.gzwstmsf6r.com
Overview
Analysis
IPs Addresses (2)
Downloads (9)
Network (41)
Website Detail
Related Domains (93)
ttb.gzwstmsf6r.com
Whois Privacy Protection Service, Inc. (Proxy Registrant)
Domain Information
The domain ttb.gzwstmsf6r.com is registered by proxy through NAME.COM, INC. and was originally registered in April of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Kirkland, Washington within the United States which resides on the eNom, Incorporated network.
Registrant:
Whois Privacy Protection Service, Inc.
Registrar:
NAME.COM, INC.
Server location:
Washington, United States (US)
Create date:
Thursday, April 9, 2015
Expires date:
Saturday, April 9, 2016
Updated date:
Thursday, April 9, 2015
ASN:
AS21740 ENOMAS1 - eNom, Incorporated,US
Root domain:
gzwstmsf6r.com
Whois:
1 gzwstmsf6r.com record
Analysis
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Softpulse.DIGITALPLUGINU.Bundler (M), PUP.Softpulse.PLUGINUPDATESL.Bundler (M), PUP.SoftPulse.YumonSys.Installer (M), PUP.Softpulse.PLUGINUP.Bundler (M)
100.00%
IPs Addresses
The domain ttb.gzwstmsf6r.com has been seen to resolve to the following 2 IP addresses.
69.64.147.242
rc2.sjl01.dmtracker.com
April 17, 2016
91.195.240.101
custip-1101.sedoparking.com
April 5, 2016
Downloads
File downloads found at URLs served by ttb.gzwstmsf6r.com.
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../4vEoIKcf?__tc=1429140976.984&lpsl=231012ff700eda0924f8af7f47d0d0fd&expire=1429227372&slp=www.nwfileds.com&pub_id=P15031027&ce_cid=LEMJlLb7HCmHc20NEkQaC6dUdJTvKSBO7aDaEEMOuBdZTSifj_zuTFNjCKsKfClVGIxu_uarvb94LINqIDBXRBQheJjb9MdOKFYLdN-HUhOU17LnFBP4yDp1w0_8n2CxnmpWlc5uccCI9tp7YIovPopqRtg3B_Wp3K5WY7tw5-jhZKO4bW50hP7FkrdaZ9DdjINeAc-IqTLDxqhfBjQbid57-yllOMmLqf1fUs1qFfAu5a566zrA3kiLphROFfZICDBbGZYDp4rVlKuriCQOcnyLvmbpzQbq0H1HSqu4c_jocQ5K6yDwRFU2SA6uKHsmpOHgUIY8_eQBQdsk6Zw_HDX6gnal-hQW-d3XoD7Cz5tI6QU7IRPB1MJkiHeedcWTdF-6Qq2jp0SEaQXE8sXXdovnEwLR1_HpfZLprqMfyD-ShRAu_9LX4rhorv9hbg&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../vdoxRukp?__tc=1429147326.189&lpsl=08f5e1ec0bbe609da0ffc5cc37fbeee4&expire=1429233706&slp=www.nwfileds.com&pub_id=P58891026&ce_cid=dsZMhYnH0uMDYdBzYZOlZXzqC6_bBf66WyO2gm-ANJQVHpmqFl8tanvIp2UR5aCzN_BlJ3I9kjFlrugvDlhbmet1Oid57NVzXV1XSwqso2aQumjpj8UM4Q59yxzLF6wfgu88rtIuOj5XQDohgt1Mb_TapsSASwQSqy_eczvvqwmdg4GJUSzVJWis14rIcCbs_lhNU5MV1V2shJ4t-gt-XGafUTgv7NC84-93CDkjLQ_xRAf3i8RnUOj6I7VIheGhDWy3O4JpTpz2AKkl2XA_JR9g3ni6I49xyCvhyTe4d8E2QGdKOZU_rdtYVg3s-1cHIne856RmWUetGIl77Re6EHMB2lOCzpDRU4UxromA2X2Xw6fZ8ZDRfb1JoAs5R73Oxw91qxWr5S8431Z5Z4zo1A&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../vdoxRukp?__tc=1429134123.942&lpsl=07abbf0d09c5185efd109bc3fa926b13&expire=1429220512&slp=www.nwfileds.com&pub_id=P60701183&ce_cid=VpQoYh2Kx_ii05D8ujrlxACZCdEjxcta2Qpp5RVNYM9ATXZ50ELB4-RwAFMdpZtUvRFls0h-yOvOTgLBamlUH6w14QsiH_hHWLaKZubkh3AP14k4tNuTrfJU-Cr-yzsyZEDJj56e4tf1zLtd2k6QgRLL4k6e518McwsVaClzzXDWGTkI6stjdkpQeVHei6dOkDB2thmZWOAo0ZkC026RSpKnVhh3AUl52VXx4UoLZlkLwBmivcuuWAw0mJ7IqOTSQUKrnVbYmXFCvPuPNGvMLvTN7p23CAfx8w-LcEvXv1rwhI-e5MwHnWtlfPEQrkXfuIW5e94wxSfw5RGaP05dlcJ2AoxsQwRcD8BXGxteyLtoUuClbygOoj_h_qbaBfgJGkJ0e5NFU6Nzz5w-NbcRjPw4YV5fi9oR6A-7cw&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../4vEoIKcf?__tc=1428546543.803&lpsl=b79b402dec62d6677b9af88a5b6ac5d0&expire=1429225649&slp=www.nwfileds.com&pub_id=P59471048&ce_cid=6mofU8GxeyeiccTF1RAmrhNc_iSI9trIvw8qJL2IsNGraNVKP43EOWIsm3u3OBDAOsIn_DDdCtDBScAxXuczq1IWx-Bf18Rfb3PaapV_BLObEKn1O5fE6yEdPHkRwE59qzJGKR5lt4iTUJmH7AJeaQARWqPPaYQBWRiL7wTaR1fFNb4zN1R_fMBL2_N9XntbvZPWHhRk68q65WWWeVSAJBrLd01uAx7-FHdH5GSh5Sgm2IV4qkByUukcbZ_E8vZ4hbrxl-AqpgU1U_zFESRdeXBpPoyjst53qPKYn0x-8oZXR6bwFgEsjUj4PLnT80aiFFIR1_0QkiEj4M77_zODco3FgHDoTP_fzwNBKEDulsdrtaXgOodCD5sR-9-bb8gGLnZXogqMbiDlUyoQ2Rm7PuIzrkQkDf6j3gOCUF184fyEvZjuo0I-LVTs2A&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../4vEoIKcf?__tc=1429144858.66&lpsl=53327d5196ea85f7b31504f50eb23589&expire=1429231250&slp=www.nwfileds.com&ce_cid=GLDv-kgDbGRs2c6BnU0AxUYEK_dw2DceOkHZcmAUgptRToQqMo1GAoNXA3JadYT7vKcBuEPc03iUlbtliQjSfmNzqmEf0fzfW_WNElu8foGhxHw1gfVYnzlO8ymPA3bfZWCmTLc_QVpgXtf2i0fqdYYKjGp7SnJi4kx1xdMfoaMH_xD0wN1JXOdtHXTC1RSi2icMP4Afz0Trln913ouQ_meWrwIPxtHHQn9Y7BdrvW9sFp3M7aG0OoTv2YdwGq2lVikW6uJLyrP28lJ7NnWaqGVkyaUFWkGuksSRqy4w_YjTKiTnFGWhlQ0AFga7kQEzZFLE5EO3Y-hVR0wJ-jWBOni56bQsCuaWu0E4ZRG91MlBb9pf0xvk6pZ_gh-0L6zqs4HmEFwzsI-YijX6cy7jXO0&pub_id=P50611887&cpn_id=C26411339&fileName=Setup
(setup.exe)
1 / 68 (PUP)
http://ttb.gzwstmsf6r.com/download/request/.../ymriBSrn?__tc=1429135535.733&lpsl=49a2a8268fe3cc9103dbb2050428217b&expire=1429221898&PubID=9700-1037&slp=www.mysoftprotr.com&ClickID=c2xpZD0wJmJyc3I9Mzg0MSZjdTQ9MjEmY2ljbXA9MzAwNDA4JmNpc2lkPUEyQ0NFRDQ2RDgxNzA4ODExNzQwOTMyNzM4JmNpdWlkPTYzNzkyNjkzNjE2MDIyNjc1NDgmcHViaWQ9OTcwMCZjaXBpZD00NDcwMDAmY2lyaWQ9QTJDQ0VENDZEODE3MDg4MjE4ODAwNTA1Mzcmb3NpZD01MzQmYm89MSZzdWJpZD0xMDM3Jm1tdD0tMSZjbnRyeT00NyZzbz0xJmNyaWQ9MTA0NzE0OCZleGNpZD0yMg==&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../4vEoIKcf?__tc=1429185909.29&lpsl=24b4aec0641ee1d645048fce1e1397c8&expire=1429272299&slp=www.nwfileds.com&ce_cid=wTfG7ir2DOuNUkeOcwHmf6mtQq1lxZffu_a2c4FABxqW756YnWBKu8D5X6MsPu49v4JIRv_jEzS1avU6C5aFaHQJeKr1MBDlHefv2f6atz9Wo7VqyC_8N7GWCYV_yjbJ3Oewq4hcW_7bKGT7Rh9Om2AQDnrqUfdnTuLpLfcua8OSZ9VLrc5R0SYMQ8N4ek9L4EN4DAXZGwQGg6mNIByOcAhTHgbCvO2HK9nksLYmdTzhBG44kBcVxJrQy2AyFL3hiMobeG_lh7iSI3wYt_FFm4dku1eEgPRlP7OPwBKee-00Ce_KiKN6cKYkou6JaSnDvX9a1kb_ZXzxEjI8fLky4nR5ych_soniV97r8VTQuFV6SXDoT5rjUDbbLz8FglDvomHEP6ef4h0g-HxEs2FSP9gHBA8b54NQL25Fjk0&pub_id=P23873932&cpn_id=C23904072&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../4vEoIKcf?__tc=1429131401.645&lpsl=65b76e93d43fadcbd5f5643bbc334bed&expire=1429217833&slp=www.nwfileds.com&pub_id=P56072218&ce_cid=YvoJVSZz2PXMnC3bVvV2NVmleYrzYlEIhiial5bNL9MwTrfNs6PUECR5g7npaBjDj9VZD14hGsSd-pHDNSLMRTmOnBmM7UkDZVf_ixGFnR9aSq_FM1Po0QCBHVYVkzG_fjbrIItK4N59PXzuHCEYpAqzE0IlySMMDC1sTfcIR9Gs_yhplVbJSxVx8B2kdcuayrlab2xmx78TLs43A2ARlz9swUhnoR4sdXWcciKCypjtxa0iS6TmmeY7tsWoPi0YCSjV0TBWoMgY1Yh9wJYAwUPuWxvYyRq-tdcxOVFMjTb4PvI3SBkuLvL62JL3D5oSV3WyhMqEITp-cPpH2tgRJgK0xcZFS8lSkih7meu49Eczw2l-Dx5Xp4m8VUZZFFOR7v-zGnr6b9KwGjFeTFLRO7ESnqh72NX68zCeB_SJQS5w-yZvLXwuneKm6m8&fileName=Setup
(setup.exe)
1 / 68 (Adware)
http://ttb.gzwstmsf6r.com/download/request/.../4vEoIKcf?__tc=1429151887.188&lpsl=08d1ae10198cece4051329e71585e636&expire=1429238286&slp=www.nwfileds.com&pub_id=P11884146&ce_cid=LUj0Lfk3_SeVxJHOSAuBO0NKY2xyEdqx4Sz3Fr4WksYf9rvmIRM9G7xj9l24BfduoRHwuFYOkdyvhWpY98sOcahEF8ooD6uhfXpebpaujw0_ohP6H1IdKboyFuALgf9p1u12bkreGZTHVPYNfDTaH8LVpqCFWTt4J6ulMzRqnzL3wulcmaK-X8V4orG2ZLVdYN_19M2xQCoJp7c-PDKA6dPwMFWWEwXJFQSRxo82gIQG5wjSYX95bT6SgkeWyw9BTLO6vTOxNgKSnrM22EY3sj_I7shezyyswmzmaatFwLV6C-3KwbPzUrma0wW7ODCemPT1SmHoKTJLRYYTBDQlBoYRK51QzXjfDGibyftZAKJvEOVimH9ybah6xmKIUFxTUE7c49SAek5iCOeGERt_xsCuY2auH374-kPTwki-fUbqhhfceL9BjjSjMfx10wglPAQbLYsxXUbvZadYfQS4eZEJMg&fileName=Setup
(setup.exe)
Network Communications
The following 41 files have been seen to comunicate with ttb.gzwstmsf6r.com in live environments.
TCP »
91.195.240.101
:80
cykimhegigka.exe
TCP »
91.195.240.101
:80
bosadgypujuz.exe
TCP »
91.195.240.101
:80
pacloksunasv.exe
TCP »
69.64.147.242
:443
UCBrowser.exe (UC Browser by UCWeb)
TCP »
69.64.147.242
:80
pricemeter.exe (PriceMeter)
TCP »
69.64.147.242
:80
ContentFinder.exe (ContentFinder by ContentFinder Software)
TCP »
91.195.240.101
:80
1799877.exe
TCP »
69.64.147.242
:80
pricemeter.exe (PriceMeter)
TCP »
69.64.147.242
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
69.64.147.242
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
69.64.147.242
:80
ContentFinder.exe (ContentFinder by ContentFinder Company)
TCP »
69.64.147.242
:80
pricemeter.exe (PriceMeter)
TCP »
69.64.147.242
:80
UCBrowser.exe (UC Browser by UCWeb)
TCP »
69.64.147.242
:80
PopiTV.exe (PopiTV)
TCP »
69.64.147.242
:80
browserairexec.exe (BrowserAir by Goobzo)
TCP »
69.64.147.242
:80
ContentSinder.exe (ContentSinder by ContentSinder Company)
TCP »
69.64.147.242
:80
pricemeter.exe (PriceMeter)
TCP »
69.64.147.242
:80
rlvknlg.exe (Relevant-Knowledge by TMRG)
TCP »
69.64.147.242
:80
tmp197b.tmp.exe (HLClientUpdater by ECON)
TCP »
69.64.147.242
:80
GenieCleanService.exe (Genie Cleaner by Oppoos.com)
Latest 20 of 53 files
Website Details
URL:
http://ttb.gzwstmsf6r.com/
Google Analytics:
UA-19309218
Title:
“gzwstmsf6r.com - gzwstmsf6r Resources and Information.”
Description:
“gzwstmsf6r.com is your first and best source for information about gzwstmsf6r . Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!”
Web server:
nginx
Related Domains
1-vinstaller.com
123mplayer.com
7s9nzohf.com
ad131m.com
amateurporntubed.com
applicationcube.com
check-live.com
checkupdatenow.com
cloudbox03.com
cloudbox06.com
cloudbox40.com
coolsoftwaredownloads.com
datacardbar.info
datingsweater.com
dbtalk.net
deliciousgoldfish.com
differentdownload.com
downloadcobol.com
downloadcobra.com
downloadcocci.com
downloadd.org
downloadinator.com
ex-soft.net
extremetrucker.com
fastupdate24.com
fetch-files.com
flashupdatenow.com
freeapplocationdownloads.com
freedownloadbrushes.com
generaldownload.com
30 of 93 related domains
X