» downprov1.amber1graph.com
Overview
Analysis
IPs Addresses (4)
Downloads (27)
Website Detail

downprov1.amber1graph.com

Whois Privacy Corp.

Domain Information

The domain downprov1.amber1graph.com registered by Whois Privacy Corp. was initially registered in January of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Singapore, Singapore within Singapore which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).

Registrant:

Whois Privacy Corp.

Registrar:

TLD REGISTRAR SOLUTIONS LTD

Server location:

Singapore, Singapore (SG)

Create date:

Saturday, January 10, 2015

Expires date:

Sunday, January 10, 2016

Updated date:

Friday, January 30, 2015

ASN:

AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:

amber1graph.com

Whois:

1 amber1graph.com record

Scanner detections:

Detections (67% detected)

Scan engine

Details

Detections

VIPRE Antivirus

Trojan.Win32.Generic.pak!cobra, Threat.4657539

95.24%

Comodo Security

Application.Win32.LoadMoney.IARS

76.19%

AhnLab V3 Security

PUP/Win32.Amonetize

57.14%

avast!

Win32:Rootkit-gen [Rtk], Adware-gen [Adw], Malware-gen, Win32:Malware-gen

47.62%

Trend Micro House Call

Suspicious_GEN.F47V0131, Suspicious_GEN.F47V0201, Suspicious_GEN.F47V0129, Suspicious_GEN.F47V0202, TROJ_GEN.R021C0ECL15

42.86%

Baidu Antivirus

PUA.Win32.Amonetize, Adware.Win32.Amonetize

38.10%

ESET NOD32

Win32/Amonetize.DJ potentially unwanted, Win32/Amonetize.DK potentially unwanted

33.33%

Kaspersky

UDS:DangerousObject.Multi.Generic, not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.Amonetize

28.57%

Panda Antivirus

Generic Suspicious, Trj/CI.A

23.81%

ESET NOD32

Win32/Amonetize.DK potentially unwanted application

23.81%

Qihoo 360 Security

HEUR/QVM16.0.Malware.Gen, HEUR/QVM42.0.Malware.Gen, Win32/Virus.Adware.7ba, Win32/Virus.Adware.8db

19.05%

Avira AntiVirus

Adware/Amonetize.304109, Adware/Amonetize.kpa, Adware/Amonetize.304042, Adware/Amonetize.304395

19.05%

McAfee

Artemis!C7FFA2AA4F4C, Artemis!343FC18A3C61, Artemis!C5321B68A28B, RDN/Generic PUP.x!c2m

19.05%

Reason Heuristics

Adware.Bundler, PUP.Amonetize, Adware.Amonetize.ET (M)

14.29%

K7 AntiVirus

Unwanted-Program , Trojan

14.29%

The domain downprov1.amber1graph.com has been seen to resolve to the following 4 IP addresses.

November 13, 2015

November 13, 2015

May 4, 2015

May 4, 2015

File downloads found at URLs served by downprov1.amber1graph.com.

17 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../wii backup launcher 4.2u_10924_i25911992_il345.exe (microsoft office 2010 gratis en español completo para windows 7 crack_10924_i25910286_il345.exe)

8 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../autodata 3.38 pl crack chomikuj_10924_i26460987_il345.exe (broken sword 5 episode 2 crack fix_10924_i26460126_il345.exe)

8 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../pearson instructor access code keygen_10924_i26464447_il345.exe (broken sword 5 episode 2 crack fix_10924_i26460126_il345.exe)

3 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../wooden bbq_10924_i24821932_il345.exe (winamp pro v5.70.3392 incl.rar_10924_i24817152_il345.exe)

8 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../what makes acrylic paint crack_10924_i25673158_il345.exe (8cd4c2552f0a5fc2df9c86e86111b787)

4 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../screaming frog crack_10924_i27646132_il345.exe (module prestashop slide_10924_i27650202_il345.exe)

4 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../freeware jigsaw puzzle maker_10924_i28083961_il345.exe (death note english dub_10924_i28111237_il345.exe)

6 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../beautiful maria of my soul_10924_i27553993_il345.exe (driver hp laserjet p2035 win7 64bit_10924_i27549680_il345.exe)

3 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../tonka construction games_10924_i26937545_il345.exe (google chrome nova verzija_10924_i26940153_il345.exe)

3 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../tonka construction games_10924_i26934444_il345.exe (google chrome nova verzija_10924_i26940153_il345.exe)

6 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../tonka construction 2 full_10924_i24663181_il345.exe (9e0425781ea7a30323fc254fca515213)

6 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../tonka construction 2 full_10924_i24662912_il345.exe (tonka construction 2 full_10924_i24663181_il345.exe)

3 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../frank ocean channel orange datpiff_10924_i27317700_il345.exe (9d7440ade33a8b0d28f16a7bffe607e6)

3 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../frank ocean channel orange datpiff_10924_i27317523_il345.exe (frank ocean channel orange datpiff_10924_i27317700_il345.exe)

2 / 68

http://downprov1.amber1graph.com/p/.../virtual engine dyno professional crack_10924_i24629645_il345.exe (pc health advisor serial key_10924_i24632093_il345.exe)

2 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../age of war trainer_10924_i25006531_il345.exe (e95a8eff8f93908002754b4eed8ffd4c)

2 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../age of war trainer_10924_i25006479_il345.exe (age of war trainer_10924_i25006531_il345.exe)

3 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../portrait professional studio 9 keygen_10924_i26858492_il345.exe (0e86aea8f674986eedbefc9aa5dea883)

3 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../halo 3 blender models_10924_i26858071_il345.exe (portrait professional studio 9 keygen_10924_i26858492_il345.exe)

11 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../diablo 2 items list_10924_i26797807_il345.exe (c5321b68a28b1ed82c3255958a585f7f)

10 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../ultraedit license id and password crack_10924_i25512799_il345.exe (343fc18a3c61f8b1df40a93046169685)

14 / 68 (Adware)

http://downprov1.amber1graph.com/p/.../bootmgr for vista_10924_i24854159_il345.exe (3e608ca75ae6d10c9c93613b57a760b7)

7 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../irs form schedule a_10924_i26076242_il345.exe (16a6af4fcf3f872c161ce4ec8ee5c93f)

6 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../tv shows lifehacker_10924_i24848342_il345.exe (98ac05a32259dfebf5a5da757a60ad76)

6 / 68 (PUP)

http://downprov1.amber1graph.com/p/.../livejasmin crack forum_10924_i27910227_il345.exe (5c8549e0ba9112c7dae7042fe74e8131)

1 / 68 (inconclusive)

http://downprov1.amber1graph.com/p/.../Fogbank Loli Cartoons_10924_i25300176_il345.exe (f25c39f9ba1dadd21ae3cb8d3c68b1d9)

2 / 68

http://downprov1.amber1graph.com/p/.../phoenix drive h game download_10924_i24475212_il345.exe (47b9fa22217e94840b81596065e17456)

URL:

http://downprov1.amber1graph.com/

SSL certificate subject:

CN=sni21141.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.