freempr8.butotiresa.com

The Management Group II

Domain Information

The domain freempr8.butotiresa.com registered by The Management Group II was initially registered in February of 2016 through TOP PICK NAMES LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Montreal, Quebec within Canada which resides on the OVH Hosting, Inc. network.
Registrar:
TOP PICK NAMES LLC

Server location:
Quebec, Canada (CA)

Create date:
Thursday, February 4, 2016

Expires date:
Saturday, February 4, 2017

Updated date:
Friday, February 5, 2016

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.FreeSoftware (M)
100.00%

Malwarebytes
PUP.Optional.BundleInstaller
33.33%

VIPRE Antivirus
Threat.4782551
33.33%

Trend Micro House Call
Suspicious_GEN.F47V1208
33.33%

Dr.Web
Trojan.DownLoad3.35287
33.33%

Sophos
Generic PUA EJ
33.33%

Avira AntiVirus
ADWARE/InstallCore.Gen
33.33%

AVG
Generic
33.33%

herdProtect (fuzzy)
a variant of 9fa0872bd2be39a7eda1c97c4b39d5cc5117816e
33.33%

ESET NOD32
Win32/InstallCore.SC potentially unwanted application
33.33%

Bkav FE
W32.HfsAdware
33.33%

Total Defense
Win32/Tnega.CCFOBXC
33.33%

K7 AntiVirus
Trojan
33.33%

NANO AntiVirus
Riskware.Win32.InstallCore.dnqbyw
33.33%

F-Prot
W32/InstallCore.AG.gen
33.33%

The domain freempr8.butotiresa.com has been seen to resolve to the following IP address.

ns513839.ip-167-114-156.net
February 10, 2016

File downloads found at URLs served by freempr8.butotiresa.com.

1 / 68      (Adware)

16 / 68    (Adware)

1 / 68      (Adware)
http://freempr8.butotiresa.com/.../download?p=ADCASH&trckid=10246810901418095389  (icreinstall_installer_adobe_flash_player_tailandés.exe)

16 / 68    (Adware)

The following 36 files have been seen to comunicate with freempr8.butotiresa.com in live environments.

 
Latest 20 of 41 files

URL:
http://freempr8.butotiresa.com/

Title:
“butotiresa.com”

Web server:
Apache