home

ofertadelmes.info

Marketing Adjal, S.L.

Domain Information

The domain ofertadelmes.info registered by Marketing Adjal, S.L. was initially registered in October of 2010 through eNom, Inc. (R126-LRMS). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
eNom, Inc. (R126-LRMS)

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Wednesday, October 20, 2010

Expires date:
Monday, October 20, 2014

Updated date:
Thursday, October 17, 2013

Whois:
1 ofertadelmes.info record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Montiera
100.00%

Trend Micro House Call
TROJ_GEN.F47V0809, TROJ_GE.26F9E521, TROJ_GEN.F47V0327
100.00%

avast!
Win32:PUP-gen [PUP]
100.00%

Dr.Web
Adware.Downware.837
100.00%

VIPRE Antivirus
Trojan.Win32.Generic, Montiera
100.00%

Reason Heuristics
PUP.HighTechMarketingSL.T, PUP.HighTechMarketingSL.K, PUP.HighTechMarketingSL.R, PUP.HighTechMarketingSL.N, PUP.Montiera.HighTechMarketing.Installer (M)
100.00%

Bkav FE
W32.Clodedc.Trojan, W32.Clod2c5.Trojan, W32.Clodebe.Trojan
80.00%

McAfee
Artemis!92635AC39C7E, Artemis!176CF2003F62
80.00%

ESET NOD32
Win32/Toolbar.Montiera
80.00%

G Data
Win32.Adware.Montera
40.00%

Comodo Security
Application.Win32.WebToolbar.Montiera.~A
20.00%

Avira AntiVirus
Adware/Downware.sjer
20.00%

Qihoo 360 Security
Win32/Virus.Adware.f6e
20.00%

herdProtect (fuzzy)
a variant of 30acb59613528739b103be863007a1b3a935a388
20.00%

The domain ofertadelmes.info has been seen to resolve to the following 2 IP addresses.

92.242.140.21
unallocated.barefruit.co.uk
May 5, 2015

94.23.209.122
ns304000.ovh.net
January 28, 2014

File downloads found at URLs served by ofertadelmes.info.

10 / 68    (Adware)
http://ofertadelmes.info:8080/downloads/static/.../FreeDownloaderManager.exe  (freedownloadmanager.exe)

14 / 68    (Adware)
http://ofertadelmes.info:8080/downloads/static/.../mysocialcolor.exe  (5c5cc0df76f63ef5c6796b3762e8d426)

8 / 68      (Adware)
http://ofertadelmes.info:8080/ToolbarLandings/static/.../FreeDownloaderManager.exe  (176cf2003f6229ae6421ffb6fc4af797)

8 / 68      (Adware)
http://ofertadelmes.info/zone/exe/.../VideoWebPlayer.exe  (b2c57259879b28bee33c778534d5cc3c)

8 / 68      (Adware)
http://ofertadelmes.info/zone/exe/.../vlcplayer.exe  (vlc-player.exe)

8 / 68      (Adware)
http://ofertadelmes.info:8080/downloads/static/.../vlc-player.exe  (32144a8c862dcde7a6682006c4bbee9a)

The following 230 files have been seen to comunicate with ofertadelmes.info in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

URL:
http://ofertadelmes.info/

Title:
“Participa en sorteos”

Description:
“Participa en sorteos”

Web server:
nginx/1.0.15

Alexa:
Global rank:  130,005
Backlinks:  23

Compete.com:
US visitors:  4,805

Statistics above are for the previous month of March 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.