home

wundersearch.net

GBM

Domain Information

The domain wundersearch.net registered by GBM was initially registered in December of 2012 through 1 & 1 INTERNET AG. The hosted servers are located in Nuremberg, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
1&1 INTERNET SE

Server location:
Bayern, Germany (DE)

Create date:
Thursday, December 6, 2012

Expires date:
Tuesday, December 6, 2016

Updated date:
Thursday, February 18, 2016

ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE

Whois:
2 wundersearch.net records

The domain wundersearch.net has been seen to resolve to the following IP address.

46.4.97.110
static.110.97.4.46.clients.your-server.de
February 8, 2016

File downloads found at URLs served by wundersearch.net.

0 / 68
https://wundersearch.net/redirect.php?url=http://downloads.malwarebytes.org/.../mbam_clean  (mbam-clean-2.2.2.7.exe)

0 / 68
https://wundersearch.net/redirect.php?url=http://.../down.php?softid=apowersoftonlinelauncher  (apowersoft-online-launcher.exe)

2 / 68      (PUP)
https://wundersearch.net/redirect.php?url=http://cdnrep.reimage.com/rpl/.../ReimageRepair.exe  (068da6555315d417179a0d3c86deaf29)

0 / 68
https://wundersearch.net/redirect.php?url=http://go.microsoft.com/fwlink/.../?LinkID=255475  (wlsetup-web.exe)

1 / 68      (PUP)
https://wundersearch.net/redirect.php?url=http://www.solvusoft.com/file-downloads/builds/static_delivery/installers/fileviewpro/stk/.../Setup_FileViewPro_2015.exe  (2141bf4a6cb6beabb7c2e86a204e160e)

0 / 68
https://wundersearch.net/redirect.php?url=http://.../vmp_setup.exe  (43b7ae1cb606581e3ec4303a74464dcc)

0 / 68
https://wundersearch.net/redirect.php?url=http://.../?linkid=9779673&entrypointid=RNP  (microsoftfixit.homegroup.run.exe)

0 / 68
https://wundersearch.net/redirect.php?url=http://download1.famatech.com/download/.../ipscan24.exe  (8baf1b03bece135cb8b89ab454f5df4a)

0 / 68
https://wundersearch.net/redirect.php?url=http://.../down.php?softid=apowersoftonlinelauncher  (apowersoft-online-launcher.exe)

0 / 68
https://wundersearch.net/redirect.php?url=http://go.microsoft.com/fwlink/.../?LinkID=255475  (wlsetup-web.exe)

10 / 68    (PUP)
https://wundersearch.net/redirect.php?url=http://cdnrep.reimage.com/ins/.../ReimageRepair.exe  (72cb31555da5996b6dc008f2f6bcbbff)

2 / 68      (inconclusive)
https://wundersearch.net/redirect.php?url=http://www.wisecleaner.com/.../WGBSetup.exe  (7f25313ce1a65b4c87b102ed5eff475d)

0 / 68
https://wundersearch.net/redirect.php?url=http://www.spyrix.com/.../sfk_setup.exe  (68a2810a09b05b83dde38c9dc2bc6f54)

0 / 68
https://wundersearch.net/redirect.php?url=http://downloads.malwarebytes.org/file/.../  (mbam-setup-consumer-2.2.0.1024.exe)

The following file have been seen to comunicate with wundersearch.net in live environments.

TCP » 46.4.97.110:80
browser.exe (Browser)

URL:
http://wundersearch.net/

Google Analytics:
UA-68263363

Title:
“wundersearch.net”

SSL certificate subject:
CN=www.wundersearch.net, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)15, OU=GT79572019

SSL certificate issuer:
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.