The domain ttb.thelatestsoft.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
Only contact by email, all postal mail will be rejected
Registrar:
SOLUCIONES CORPORATIVAS IP, SL
Server location:
Oregon, United States (US)
Create date:
Friday, October 11, 2013
Expires date:
Tuesday, October 11, 2016
Updated date:
Thursday, December 31, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
DownloadManager.AirSoftware.F, PUP.Installer.TuguuSLU.F, PUP.Installer.Stepitapp.F, PUP.Tuguu.TuguuU.Bundler (M), PUP.Tuguu.TuguuIsr.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Orbitum.Bergariu.Installer.Meta (L), PUP.Softpulse (M), PUP.Tuguu (M)
100.00%
avast!
Win32:Adware-gen [Adw], PUP-gen [PUP], Win32:Dropper-gen [Drp]
12.50%
VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
12.50%
Sophos
AirInstaller, DomainIQ pay-per install, Generic PUA OF
12.50%
Avira AntiVirus
Adware/AgentCV.770464, TR/Agent.461200, TR/Dldr.Agent.216048
12.50%
Vba32 AntiVirus
AdWare.AirAdInstaller, OScope.Downware.DomaIQ, suspected of Trojan.Downloader.gen.h
12.50%
Malwarebytes
PUP.Optional.AirAdInstaller, PUP.Optional.Domalq
8.33%
Comodo Security
Application.Win32.AirAdInstaller.B, Application.Win32.DomaIQ.JIK
8.33%
Dr.Web
Trojan.SMSSend.5157, Trojan.PayInt.1
8.33%
ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application, Win32/DomaIQ.AN potentially unwanted application
8.33%
Rising Antivirus
PE:PUF.Airinstall!1.9C4C, PE:PUF.DomaIQ!1.9EEB
8.33%
Qihoo 360 Security
Malware.QVM18.Gen, Malware.QVM06.Gen
8.33%
Agnitum Outpost
PUA.AirAdInstaller, Adware.Agent
8.33%
AhnLab V3 Security
PUP/Win32.AirInstaller, PUP/Win32.DomaIQ
8.33%
IKARUS anti.virus
PUA.AirAdInstaller, APPL
8.33%
The domain ttb.thelatestsoft.com has been seen to resolve to the following 4 IP addresses.
ec2-54-149-159-30.us-west-2.compute.amazonaws.com
February 28, 2016
ec2-52-10-156-255.us-west-2.compute.amazonaws.com
February 28, 2016
ec2-54-201-201-245.us-west-2.compute.amazonaws.com
August 12, 2014
ec2-50-112-177-75.us-west-2.compute.amazonaws.com
August 12, 2014
File downloads found at URLs served by ttb.thelatestsoft.com.
The following 2 files have been seen to comunicate with ttb.thelatestsoft.com in live environments.
URL:
http://ttb.thelatestsoft.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx (PHP/5.3.10-1ubuntu3.17)