ttb.123mediaplayer.com

Whois Privacy Protection Service, Inc.  (Proxy Registrant)

Domain Information

The domain ttb.123mediaplayer.com is registered by proxy through NAME.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Remove Malware from ttb.123mediaplayer.com - Powered by Reason Core Security
Registrar:
NAME.COM, INC.

Server location:
Oregon, United States (US)

Create date:
Tuesday, September 25, 2012

Expires date:
Sunday, September 25, 2016

Updated date:
Wednesday, March 18, 2015

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Task.Mindadmedia.E, PUP.LunacomInteractive.E, PUP.TuguuSL.F, PUP.LunacomInteractive.F, PUP.Installer.PaymentsInteractivesl.E, PUP.PaymentsInteractivesl.E, PUP.Bundler.Tuguu, PUP.Tuguu.Bundler, PUP.Tuguu.PaymentsInteractivesl.Bundler (M), PUP.Tuguu.LunacomInteractive.Bundler (M)
100.00%

McAfee
Artemis!AB02A4C594A4, Artemis!6D113D79991A, Adware-DomaIQ, Artemis!3E3517398CC5, RDN/Generic PUP.x!bjd, Artemis!4F2B519A2D59
54.17%

Malwarebytes
PUP.Optional.Smart, PUP.Optional.DomaIQ, PUP.Optional.BundleInstaller.A, PUP.OptionalBundleInstaller.A
54.17%

K7 Gateway Antivirus
Unwanted-Program , Trojan , Riskware , Dialer
54.17%

K7 AntiVirus
Unwanted-Program , Trojan , Riskware
54.17%

Dr.Web
Adware.Downware.1676, Trojan.Packed.24553, Trojan.Domaiq.263
54.17%

VIPRE Antivirus
OutBrowse, DomaIQ, Threat.4783235, Threat.4150696, Threat.4783262
54.17%

Sophos
DomainIQ pay-per install, Generic PUA BA, Generic PUA GM, Troj/Agent-AENY, Generic PUA HO, PUA.DomainIQ pay-per install
52.08%

Agnitum Outpost
PUA.OutBrowse, PUA.DomaIQ
52.08%

Fortinet FortiGate
Riskware/MultiPlug, Adware/DomaIQ, Adware/Fam.NB, Riskware/PUP_x, Riskware/DomaIQ.E
52.08%

SUPERAntiSpyware
PUP.DomaIQ/Variant, PUP.BundleInstaller/Variant
52.08%

avast!
Win32:Installer-AE [PUP], Win32:DomaIQ-AO [PUP], Win32:PUP-gen [PUP], DomaIQ-AP [PUP], DomaIQ-AN [PUP], DomaIQ-AL [PUP]
50.00%

NANO AntiVirus
Trojan.Win32.Packed.cqxvek, Riskware.Win32.DomaIQ.csfkrg, Trojan.Win32.DomaIQ.csfkze, Trojan.Win32.DomaIQ.csnyna, Trojan.Win32.AgentAENY.cqjycv
50.00%

Avira AntiVirus
APPL/DomaIQ.Gen7, PUA/DomaIQ.Gen
50.00%

Vba32 AntiVirus
Downloader.OutBrowse, suspected of Trojan.Downloader.gen.h, Downware.DomaIQ, AdWare.MSIL.DomaIQ.bgt, OScope.Downware.DomaIQ
47.92%

The domain ttb.123mediaplayer.com has been seen to resolve to the following 4 IP addresses.

ec2-50-112-177-75.us-west-2.compute.amazonaws.com
July 3, 2014

ec2-54-201-201-245.us-west-2.compute.amazonaws.com
July 3, 2014

ec2-54-213-51-216.us-west-2.compute.amazonaws.com
June 21, 2014

ec2-54-200-194-173.us-west-2.compute.amazonaws.com
January 10, 2014

File downloads found at URLs served by ttb.123mediaplayer.com.

 
Latest 30 of 50 download URLs

Remove Malware from ttb.123mediaplayer.com - Powered by Reason Core Security