home

a.gamessunforall.net

Natan Fuks

Domain Information

The domain a.gamessunforall.net registered by Natan Fuks was initially registered in May of 2015 through ONLINENIC, INC.. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ONLINENIC, INC.

Server location:
Oregon, United States (US)

Create date:
Thursday, May 21, 2015

Expires date:
Saturday, May 21, 2016

Updated date:
Thursday, May 28, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
gamessunforall.net

Whois:
1 gamessunforall.net record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.PCUtilities.Task.Meta (M), PUP.Optional.PCUtilities (M), Threat.Win.Reputation.IMP
100.00%

VIPRE Antivirus
Threat.4732184
28.57%

Dr.Web
Win32.Siggen.7
28.57%

Microsoft Security Essentials
Threat.Undefined
28.57%

McAfee
Virus.W32/Virut.n.gen
28.57%

The domain a.gamessunforall.net has been seen to resolve to the following 9 IP addresses.

141.8.226.19
May 26, 2016

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
March 3, 2016

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
March 3, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
March 3, 2016

52.27.23.115
ec2-52-27-23-115.us-west-2.compute.amazonaws.com
June 30, 2015

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
June 30, 2015

52.26.130.111
ec2-52-26-130-111.us-west-2.compute.amazonaws.com
June 26, 2015

52.25.121.207
ec2-52-25-121-207.us-west-2.compute.amazonaws.com
June 26, 2015

52.26.142.237
ec2-52-26-142-237.us-west-2.compute.amazonaws.com
June 26, 2015

File downloads found at URLs served by a.gamessunforall.net.

1 / 68      (Malware)
http://a.gamessunforall.net/hp/?q=D1DKe4aCtVmWomjlha6HjVRlfYlQY8DjjIpLr1G25NwqSxhdVLRZcwI6nLdPpPDo4yzg9nx0wzC8fM133bAzrJ3elQ8SN19mTXsZyXGb9CnAe2ztIlApPncBKkKyU8YAgV 4cxU6nXSzP9ZWeI9ZjgmrgLVtyD37xBRKpsUIAcNnEhlz5c6Sos I9q/.../kXAHT1 BW2qD osEVHNT3U3A3XsBNllupxpJl  (download.exe)

1 / 68      (Malware)
http://a.gamessunforall.net/hp/?q=95Lnk/tpj8RQ89/XZTKVMmu6zCxZvWG65CwfoRDn5oF0y5VeLVUwLfGowrbYdbTd0EfJ65 z1Fzk0Az2yFSSICu3BrzT3VQvov7rqDerUx7SV7QmJkXnitCQEgdvG18a7PpnLVgUGxC0IoIPF6P3eNkW5fG25vbAxnmC54OWxy9tMBRjaSqnRSRKr489zGRDbqu5o7KqO0p/rx98WFUrYekB2V/.../DeR7WrQpVGqbXNdFdqvFHFOYExfBeJPIupysu1I2G35aqv2VWYI  (gta iv repack mr dj.exe)

1 / 68      (Malware)
http://a.gamessunforall.net/hp/?q=HwoexYl2r Vbmjlhab7yazgq1JG7kIfIIE2VSGsUiZ/Kkyb 2vtzGUGPzH9rp13CWSaP1elVm53NasK1/AQBzCE3YnFBXqCmZoGrUHrkXD2xstXT6RLS3Qa4OrVqgPDNFhMR13EONKtPO7nNw/KSQWpgRi4MnHMrX6QQUhZKUpihyF3Lxr7tEQDd1csyH3eqkTP7dfa8Dqq0b4F3n2xaYqcOUnSzWgkTSgI2X4jBdtn6YBI 1e076GtYgL88MC4K/Y6WkyaUsSwemPhZ8Bds7CYKgWqTw MC512yOmzhKf5EYjyi077TESwtP6UqgMsZM29IrnbeIh4eLTxSo3R9KdixPAuYsEieyU513YJkZhp tr3TwEjQVCOcG3FPautWwv4aaTKP6bA/mOn8etC2s/.../mOxSI3L4XV6R5HrwccJMpvCzq9rrn 4E1NEN3xZJYZqAnxrxKV7Mc  (free download nba 2k13 full version pc game.exe)

1 / 68      (Malware)
http://a.gamessunforall.net/hp/?q=ZchCWm3WHlk1N01234DnkwDYCTWVCnSSRVeqmHm8cPkLoRDhPzZxGOnlnHZv2CU/5QezZ8B AhHQUWb6vcQemFVY85S0qPrKiwYjSOAK9sWQdWCWwWdNGtVm/12eOGbeV651qIgWNfGSE5qEwNWo/xzgnobq4IQ5Fb06k9tDReINxIIg4nEXaKtpAOZsYhUriZsv0fZ3egaE14NIu5EThamOgMmvb4cjX4YjTbNAXh6sSK4 AtBzEYmr1j0DzGBcO4yCs2kndyGUuku4MuFZKV6 2lPDDprtmzrKhQBFsY4KAJWfiu4MnHWEwLJ2uszoAkOI4iVqnveOwNePlUgXusXVNs4sZWbEOE7 iTs3zfX/KPkKwUTKGgDJ9r5Z sVpdmCLiQhvsIK2iwSu0G83Jj3 oNOieJNEDkXJ38bQ/SaZam0BCnFCpTGIydIqrIxMi3Jk5G6jek97hiA8wY7ZzcAG0UlSMBM/UlUB2Cgdhb/.../frYJKRQx3m ssXaxuA  (magix video pro x4 11.0.5.26 (patch-khg) [chingliu].exe)

1 / 68      (PUP)
http://a.gamessunforall.net/hp/?q=xhMzvzOsXe3cGfABCDN7rPS5ZaHlCIGQNLUA0GYODEs1HvwJTtpP81UBCnI2xLvoMLd178MhV8sZDIcb4EdYFkpetPS5y3IzCI3gzYHCUoWE7EhNFUmBFScd2xLc/ApsifW4Chfr7vRk2EXFV/A1BsY5Q9liQ9E6NssIEe4g9dEc1ugW92gK2mn3Jk3vT2O LAwAZ918dwWta3ThpVQQSGUrmWH1Fo7O7fDUDNKMMCKNzx5Pp8Xwtckybz0BYe20iOr9rX4bJTEocbbok8JXGzA4kb0pOrTLs O9jRP4hGl yaLCEafa/DykcVcqk7fbCxNl7DnlU69YaH3gICQG3Vv4FDdxBml6tV59JRgqmXOdT7qeSfSvags3F8EXXJ2cJq5PeDmXQUKL3 0X3ehHNnBEEbk aZBSQ96KDHNkFa2L0R2WLsPV7pVwuoQEaga0obZr48fWYnPfAv7aNijQT4Ct1iltQy/X1MPFW7reCWYS/75AJ8yhOKZjlYDrxQ2cIwARgiVuHQnLgM4GtbM20pfB2vxtoLsMC/6QtHOClTFJrPbHZTFCYJhNEt807a8q6RAK0CdpR6JQgm1UEyLkGd 49CX5yQ0/.../  (download.exe)

5 / 68      (PUP)
http://a.gamessunforall.net/hp/?q=Rv2XTAWUqLpo9/XZTVEsQsPS98MQsfZ0WXoOLe/xmV7C5UqMvA1sSdjHjXU/nsqrQnGSLNVNtxaY8bI0M JTxUGnrFOMfom19t623KCstDL2P2Ivbdn8OzYsARDnoIT67IDV 4fy9W8gsMSpPOVu2Hb29rfHitEU7sb8R4AAmQailoJUiXkW5W2SSXrxdbZZE0ge3yXNPeokX4vI7sjrCvcNjakr4z1u VhJ1FTM3LdjEgi nPARpiZ26B9YuGyA SFLu0JF0I8lHY7Vo6OkADsxkycpi0GPu/EnK7SzaTK1kWB1pGyY5XsMFFN7E1WxSZVH6XLP5IPAlzi1IcsycES9GyX7DXDqaeXxf2mRlMpGPBbvg2P991IaxeuDHygiKdgAFvAYwNCwSqEljqtqHKz0S5b6MjtBswAnG3baeXqm4C4qkqS0u/.../27xSBkWUN74or4Pf4HROOxLx2W2zqDFJ00OcyTSvV5zA8f5jEzr DSAZ8gglGSDe0s3qFYeo5  (avanset vce exam simulator pro 1.1.7 crack download.exe)

5 / 68      (PUP)
http://a.gamessunforall.net/hp/?q=YgjAtGcfVe7rfxztvq0QbWBY1nWN13Jw04AqdoCrBm2abQ/kaMv9JGgxry1fnSEzc7SYztOsyv9aq8u3fyVplWFmgCvOzT9nkTNLZ0RYSpXIWvaJhJzx/.../1vq2x9CnKzSoLIWplxjlMyCMWHHdAcBCzLwB KPpz  (download.exe)

The following 2 files have been seen to comunicate with a.gamessunforall.net in live environments.

TCP » 52.11.167.137:80
download.exe

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

URL:
http://a.gamessunforall.net/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
openresty

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.