The domain www.nawert.com is registered by proxy through GODADDY.COM, LLC and was originally registered in January of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Vitoria-Gasteiz, Pais Vasco within Spain which resides on the RIPE Network Coordination Centre network.
Pais Vasco, Spain (ES)
Monday, January 11, 2016
Wednesday, January 11, 2017
Monday, January 18, 2016
AS57910 SCIP-AS Soluciones Corporativas IP, SL,ES
Detections (95% detected)
PUP.100BlogsSL.h, PUP.FormulaEFTEuropaSL.g, PUP.OnekitInternetSL.c, PUP.VittaliaInternetSL.c, PUP.Installer.FreeDownloadFriedCookie.a, PUP.Installer.ironSource, PUP.FreeSoftware, PUP.OnekitInternet.Bundler (M), PUP.InstallCore.Installer.Installer (M), PUP.installCore.WorldSetup (M), PUP.Vittalia.VittaliaInternet.Bundler (M)
Win32.Sector.21, Trojan.MulDrop5.10078, Trojan.Packed.26052, Trojan.Packed.28459, Trojan.InstallCore.15, Trojan.DownLoad3.35287, Trojan.Vittalia.34
InstallCore.b, Vittalia Installer, Threat.4786531, Threat.5063361, Threat.4786018, Threat.4150696, Threat.4782551
W32/Sality.AT, Adware/InstallCore.144181, Adware/InstallCore.BY.1, ADWARE/InstallCore.Gen9, Adware/InstallCore.787800.4
Generic_c, Adware Generic_r.JR, Onenet
Win32/InstallCore.BY potentially unwanted application, Win32/Vittalia.M potentially unwanted application, Win32/InstallCore.QH potentially unwanted application, Win32/InstallCore.UW potentially unwanted application
PUP.Optional.InstallCore, PUP.Optional.InstallCore.A, PUP.Optional.Vittalia, PUP.Optional.FriedCookie, PUP.Optional.BundleInstaller
Unwanted-Program , Trojan
W32/Sality.gen2, W32/A-a67cc11f, W32/InstallCore.AC.gen, W32/InstallCore.AG.gen
McAfee Web Gateway
Artemis!B81EA9CCBC0E, Artemis!A8E4B61C1DFA, BehavesLike.Win32.CryptInno.bc, BehavesLike.Win32.AdwareDoma.cc
Application.Win32.InstallCore.HYE, Application.Win32.FriedCookie.CIRK, Application.Win32.InstallCore.AKZ
Trend Micro House Call
Win32/InstallCore.MW, Win32/InstallCore.CF (variant), Win32/TrojanDropper.Addrop
The domain www.nawert.com has been seen to resolve to the following 5 IP addresses.
October 1, 2015
May 1, 2014
File downloads found at URLs served by www.nawert.com.
The following file have been seen to comunicate with www.nawert.com in live environments.
Statistics are for the previous month.
30 of 247 related domains