secured.atouristwest.us

Admonetizer Inc

Domain Information

The domain secured.atouristwest.us registered by Admonetizer Inc was initially registered in April of 2015 through GoDaddy.com, Inc.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, INC.

Server location:
Arizona, United States (US)

Create date:
Monday, April 20, 2015

Expires date:
Tuesday, April 19, 2016

Updated date:
Monday, April 20, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Root domain:

Scanner detections:
Detections  (73% detected)

Scan engine
Details
Detections

Avira AntiVirus
PUA/Vittalia.Gen, PUA/InstallMonetizer.Gen
66.67%

Malwarebytes
PUP.Optional.Clara.A, PUP.Optional.CheckOffer
66.67%

herdProtect (fuzzy)
a variant of b436aa6cf7b27346e63a249b64200fcde3344fb2, a variant of 6b8036db5f96e735862e34159dc0165d0dfe36e5, a variant of c39047652a430c048b8ff963317b6eb9f1038e6e
55.56%

SUPERAntiSpyware
Adware.InstallMonetizer/Variant
55.56%

NANO AntiVirus
Trojan.Nsis.Downloader.djhpgw, Riskware.Win32.InstallMonetizer.dymuwe
55.56%

Rising Antivirus
NS:PUF.SilenceInstaller!1.9DDF, NS:PUF.SilenceInstaller!1.9DDF[F1], PE:Malware.Generic/QRS!1.9E2D [F]
55.56%

Reason Heuristics
PUP.Installer.DuuquGroupOU.Q, PUP.ClaraLabSoftware.Installer (M), Threat.Win.Reputation.IMP, Adware.Bundler (M)
44.44%

Dr.Web
Trojan.DownLoad3.25843, Adware.Iminent.66, Adware.InstallMonetizer.1
33.33%

ESET NOD32
Win32/InstallMonetizer.BG potentially unwanted application, Win32/InstallMonetizer.BJ potentially unwanted application
33.33%

Baidu Antivirus
PUA.Win32.InstallMonetizer
33.33%

ESET NOD32
Win32/InstallMonetizer.BG potentially unwanted
22.22%

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen
22.22%

VIPRE Antivirus
Threat.4786532
11.11%

Trend Micro House Call
Suspici.1B63843A
11.11%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
11.11%

The domain secured.atouristwest.us has been seen to resolve to the following IP address.

ip-184-168-221-43.ip.secureserver.net
May 16, 2016

File downloads found at URLs served by secured.atouristwest.us.

15 / 68    (PUP)

9 / 68      (PUP)

2 / 68      (Adware)

3 / 68      (inconclusive)

8 / 68      (PUP)

1 / 68      (Malware)
http://secured.atouristwest.us/VuuPC_VO2_8907.exe  (b869c3eeb26fd0ae9fe701ab02f5707a)

5 / 68      (PUP)
http://secured.atouristwest.us/.../Bobrowser.exe  (15b994ee45a834eefd31c4f72411def2)

8 / 68      (PUP)

8 / 68      (PUP)

The following 144 files have been seen to comunicate with secured.atouristwest.us in live environments.

 
Latest 20 of 145 files