home

click202.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SpeedyPC.Optional.Installer.Meta (L)
100.00%

The domain click202.com has been seen to resolve to the following 3 IP addresses.

23.21.216.128
ec2-23-21-216-128.compute-1.amazonaws.com
July 5, 2016

54.243.171.154
ec2-54-243-171-154.compute-1.amazonaws.com
July 5, 2016

54.243.170.75
ec2-54-243-170-75.compute-1.amazonaws.com
July 5, 2016

File downloads found at URLs served by click202.com.

1 / 68      (PUP)
http://click202.com/tracking202/.../dl.php?t202id=4135725&t202kw=icspon-spc-bf  (speedypc pro installer_74039525-7b54-4afa-a253-dca6e0ba9207_.exe)

The following 4 files have been seen to comunicate with click202.com in live environments.

TCP » 54.243.170.75:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.243.170.75:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.243.170.75:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.243.170.75:80
UCBrowser.exe (UC Browser by UCWeb)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.