home

cdn.whitebuildstage.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
whitebuildstage.com

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
100.00%

The domain cdn.whitebuildstage.com has been seen to resolve to the following 2 IP addresses.

54.148.241.40
ec2-54-148-241-40.us-west-2.compute.amazonaws.com
May 26, 2016

52.35.246.224
ec2-52-35-246-224.us-west-2.compute.amazonaws.com
May 18, 2016

File downloads found at URLs served by cdn.whitebuildstage.com.

1 / 68      (Adware)
http://cdn.whitebuildstage.com/c?x=frUn4Txd9Ap13cN5cUdjXxmDOKTaipFpgIAavtl6a2o=&c=lXl06rhxy5RAm/6bNl3wVjyMcxUqZzHr6ghLg/M1o7SBDngI8QoyJ2CrNeoCV7suoNMLDWGm5j 0Si0je/1M/ClhN/Dou0l2sIpRgXNHE 5VSifO3dXKReGCFBVRBeb2&fallback_url=http://download.microsoft.com/download/F/5/D/.../office2007sp3-kb2526086-fullfile-pt-br.exe&downloadAs=microsoft-office-2007-service-pack-3-sp3--32-bits.exe  (b2d094cab505ad7b6ad61006a1d7113b)

1 / 68      (Adware)
http://cdn.whitebuildstage.com/c?x=yLVLOyCTpQfWVEwFpoT6EEVq4lrHxqjntI/poN67iTc=&c=rncFfgeLuYYhD3vTT8bKRz8g8r2dFwyK5Wy2QGJ9l8qk1RHdsWidYyv3aMOYjfSTjcNqSU3kJ0HZNMpTKzWW8HC/zw1Sbb5xA8OPyaGabqAYRLQAANZH6owxUGLNKnrM&fallback_url=http://download.ongame.com.br/.../PointBlankSetup_20140710.exe&downloadAs=point-blank-32-bits.exe  (c727c26f32bdce36fcbbea8d7a93fb4b)

0 / 68
http://cdn.whitebuildstage.com/c?x=7u12YZuyCmJXeDv0n6oy/qeWU98ots4mnBbsHIY qqQ=&c=qqdLiMFiga7d70FE csn36xMRJJRTIHeNd5TBCaY0ZtkdMYGSMoHzt6nHwpE7zMGUxlQhGNJrV lWShbK5W9kazjjugPextfsMAEAVlj/rM9MCuZocpuYRW6EjvPJm f&fallback_url=http://.../DownloadHandler.ashx&downloadAs=fotosizer-32-bits.exe  (fotosizer 2.09.0.548 free.exe)

1 / 68      (Adware)
http://cdn.whitebuildstage.com/c?x=PpnNqctC2Yw75nN50Ub5iXloUKTCahoQP8Vnxx/dBDM=&c=Yn9QfF1h7NNqVriSnvXdMTP/gbo rz2FsezYM2Zd6hiId XpvBrjhZVqyE0Jxa8KSeF0z5xYSa7oeVvtshv1EBpRoqzrZ0aA/3AEwoIG/U/GFs9ucYdj49GReL/igf5w&fallback_url=http://download.teamviewer.com/.../TeamViewer_Setup_pt.exe&downloadAs=teamviewer-32-bits.exe  (8416ad96a551fc1d8d33cbdaded38f59)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.