» dragonset.info
Overview
Analysis
IPs Addresses (5)
Downloads (47)
Network (5)

dragonset.info

Pending Renewal or Deletion

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Pending Renewal or Deletion

Registrar:

Dynadot, LLC

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:

2 dragonset.info records

Scanner detections:

Malware distribution (95% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Win.Reputation, PUP.WebPick, Threat.Win.Reputation.IMP, PUP.WebPick.StepanRybin, PUP.WebPick.StepanRy (M), PUP.WebPick (M)

95.12%

AVG

Adware Generic6.OMR, Adware Generic6.OUV, Adware Generic_r.ABT, Adware Generic6.ABDJ

29.27%

AhnLab V3 Security

PUP/Win32.MultiPlug, Adware/Win32.MultiPlug

29.27%

Vba32 AntiVirus

suspected of Heur.Malware-Cryptor.Multiplug, SScope.Adware.MultiPlug, AdWare.MultiPlug

29.27%

F-Secure

Application:W32/Generic.70053c248f!Online, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mikey.8261, Gen:Variant.Adware.Kazy.552220

26.83%

Emsisoft Anti-Malware

Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mikey.8261, Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.8516

26.83%

MicroWorld eScan

Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mikey.8261, Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPlug.16

26.83%

Bitdefender

Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mikey.8261, Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.8516

26.83%

Sophos

MultiPlug, PUA 'MultiPlug' (of type Adware), MultiPlug (PUA)

26.83%

G Data

Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mikey.8261, Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.8516

26.83%

Avira AntiVirus

Adware/MPlug.tros, ADWARE/MultiPlug.Gen7, ADWARE/MultiPlug.Gen4, PUA/MultiPlug.11245

24.39%

Rising Antivirus

PE:Malware.XPACK-HIE/Heur!1.9C48, PE:AdWare.Win32.MPLug.b!1075357039

24.39%

McAfee

Program.MultiPlug-FVZ, Program.MultiPlug-FVQ, Program.MultiPlug-FWG, MultiPlug-FWS, MultiPlug-FXC, MultiPlug-FTW

24.39%

F-Prot

W32/S-246e40d1, W32/S-b1f91337, W32/S-4ef98cc5, W32/S-42f8a357, W32/S-eef9a8e7, W32/S-0531a5f9, W32/S-d56eee43, W32/A-327c3a17

24.39%

NANO AntiVirus

Riskware.Win32.MultiPlug.doctfd, Trojan.Win32.Agent.dnysod, Riskware.Win32.MultiPlug.doorjx, Riskware.Win32.MultiPlug.dpbspo

24.39%

The domain dragonset.info has been seen to resolve to the following 5 IP addresses.

52.27.128.59

ec2-52-27-128-59.us-west-2.compute.amazonaws.com

August 13, 2015

52.27.128.56

ec2-52-27-128-56.us-west-2.compute.amazonaws.com

August 13, 2015

52.27.128.62

ec2-52-27-128-62.us-west-2.compute.amazonaws.com

August 13, 2015

54.149.241.47

ec2-54-149-241-47.us-west-2.compute.amazonaws.com

May 5, 2015

54.69.228.231

ec2-54-69-228-231.us-west-2.compute.amazonaws.com

May 5, 2015

File downloads found at URLs served by dragonset.info.

1 / 68 (Malware)

http://dragonset.info/v377?product_name=Thuly-B - No Time&file size=&product_title=Thuly-B - No Time&installer_file_name=Thuly-B - No Time&product_file_name=Thuly-B - No Time.mp3&product_download_url=http://.../get.php?file=2024c0f7&m (thuly-b - no time.exe)

1 / 68 (Adware)

http://dragonset.info/v2921?self_redirect=0&product_name=Ronny & I 2013 - A gay short film subtitled by qafone.net.mp4&filesize=1mb&product_title=Ronny & I 2013 - A gay short film subtitled by qafone.net.mp4&installer_file_name=Ronny & I 2013 - A gay short film subtitled by qafone.net.mp4&product_file_name=Ronny & I 2013 - A gay short film subtitled by qafone.net.mp4&product_download_url=http://srv72.clipconverter.cc/download/.../Ronny & I 2013 - A gay short film subtitled by qafone.net.mp4 (ronny.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=el perro chacarrón y sus amigos.mp4.mp4&filesize=1mb&product_title=el perro chacarrón y sus amigos.mp4.mp4&installer_file_name=el perro chacarrón y sus amigos.mp4.mp4&product_file_name=el perro chacarrón y sus amigos.mp4.mp4&product_download_url=http://r19---sn-p5qlsn7z.googlevideo.com/.../mp4&initcwndbps=603750&ipbits=0&source=youtube&dur=317.300&nh=IgpwcjAzLmlhZDA3KgkxMjcuMC4wLjE&fexp=900720,907263,912148,934954,9405696,9406849,9406996,9407103,9407440,9407720,9408101,9408106,947243,948124,948703,951511,951703,952612,955207,957201,960622,961404,961406,964738&key=yt5&signature=E13BED327955A16336AB7377F91BA4692CCD217C.04D3E7BA95BA3ACFF422DCC07C1FE5D6572EABFE&&titl (58a0.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Alfabet Mafii - Dekada Mafijnej Warszawy Caly Film (Mafia Pruszkowska).mp4&filesize=1mb&product_title=Alfabet Mafii - Dekada Mafijnej Warszawy Caly Film (Mafia Pruszkowska).mp4&installer_file_name=Alfabet Mafii - Dekada Mafijnej Warszawy Caly Film (Mafia Pruszkowska).mp4&product_file_name=Alfabet Mafii - Dekada Mafijnej Warszawy Caly Film (Mafia Pruszkowska).mp4&product_download_url=https://r1---sn-25ge7n7e.googlevideo.com/.../mp4&ratebypass=y (ca10.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Semana Santa.mp4&filesize=1mb&product_title=Semana Santa.mp4&installer_file_name=Semana Santa.mp4&product_file_name=Semana Santa.mp4&product_download_url=http://srv70.clipconverter.cc/download/.../Semana Santa.mp4 (semana santa.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=COMERCIALES VIEJOS DE TV COLOMBIANA ALMACENES EXITO.wmv.mp4&filesize=1mb&product_title=COMERCIALES VIEJOS DE TV COLOMBIANA ALMACENES EXITO.wmv.mp4&installer_file_name=COMERCIALES VIEJOS DE TV COLOMBIANA ALMACENES EXITO.wmv.mp4&product_file_name=COMERCIALES VIEJOS DE TV COLOMBIANA ALMACENES EXITO.wmv.mp4&product_download_url=https://r14---sn-5hn7snez.googlevideo.com/.../mp4&ms=au&requiressl=yes&pl=45&itag=22&mt=1424887538&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,pl,ratebypass,requiressl,source,upn,expire&mm=31&ip=2001:41d0:b:446:acc1:c434:5909:696&key=yt5&sver=3&expire=1424909232&initcwndbps=1415000&upn=Q513XPFUDnA&ratebypass=yes&mv=m&signature=475A2A1848CCBA6CB998EAB0C508573233AC81EA.0AC834DF3A6D49562B1F26458849FE906CE98FDF&source=youtube&fexp=905657,907263,916600,916729,924638,927622,931379,936121,936928,9405450,9405997,9406958,94391 (comerciales viejos de tv colombiana almacenes exito.wmv.mp4.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=New Dancehall mix 2014... Mavado,Alkaline,Popcaan,Aidonia.mp3&filesize=1mb&product_title=New Dancehall mix 2014... Mavado,Alkaline,Popcaan,Aidonia.mp3&installer_file_name=New Dancehall mix 2014... Mavado,Alkaline,Popcaan,Aidonia.mp3&product_file_name=New Dancehall mix 2014... Mavado,Alkaline,Popcaan,Aidonia.mp3&product_download_url=http://srv51.clipconverter.cc/download/.../New Dancehall mix 2014... Mavado,Alkaline,Popcaan,Aidonia.mp3 (new dancehall mix 2014... mavado,alkaline,popcaan,aidonia.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=???? ????? ??????? ?? ????? (????? ?????).mp4&filesize=1mb&product_title=???? ????? ??????? ?? ????? (????? ?????).mp4&installer_file_name=???? ????? ??????? ?? ????? (????? ?????).mp4&product_file_name=???? ????? ??????? ?? ????? (????? ?????).mp4&product_download_url=https://r9---sn-p5qlsnly.googlevideo.com/.../mp4&expire=1427170408&sver=3&ip=2001:41d0:2:2563:a71b:a66f:ccf4:6d81&itag=18&nh=IgpwcjAzLmlhZDA3KgkxMjcuMC4wLjE&fexp=900720,907263,934954,9406731,9406819,9406938,9407103,9408101,9408136,948124,948703,951511,951703,952302,952612,952901,955301,957201,959701,961404&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,nh,pl,ratebypass,requiressl,so (( ).exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Presentación De Negocio DXN.avi&filesize=1mb&product_title=Presentación De Negocio DXN.avi&installer_file_name=Presentación De Negocio DXN.avi&product_file_name=Presentación De Negocio DXN.avi&product_download_url=http://srv65.clipconverter.cc/download/.../Presentación De Negocio DXN.avi (presentacin de negocio dxn.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Franse Uiensoep Recept.mp4&filesize=1mb&product_title=Franse Uiensoep Recept.mp4&installer_file_name=Franse Uiensoep Recept.mp4&product_file_name=Franse Uiensoep Recept.mp4&product_download_url=http://srv53.clipconverter.cc/download/.../Franse Uiensoep Recept.mp4 (franse uiensoep recept.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Donatan Cleo feat. Enej - Bra? [Official Video].mp3&filesize=1mb&product_title=Donatan Cleo feat. Enej - Bra? [Official Video].mp3&installer_file_name=Donatan Cleo feat. Enej - Bra? [Official Video].mp3&product_file_name=Donatan Cleo feat. Enej - Bra? [Official Video].mp3&product_download_url=http://srv73.clipconverter.cc/download/.../Donatan Cleo feat. Enej - Bra? [Official Video].mp3 (donatan cleo feat. enej - bra_ [official video].exe)

1 / 68 (Adware)

http://dragonset.info/v21773?self_redirect=0&product_name=Fall Out Boy Immortals Big Hero 6 Ost.mp3&filesize=6.46 MB&product_title=Fall Out Boy Immortals Big Hero 6 Ost.mp3&installer_file_name=Fall Out Boy Immortals Big Hero 6 Ost.mp3&product_file_name=Fall Out Boy Immortals Big Hero 6 Ost.mp3&q=Fall Out Boy Immortals Big Hero 6 Ost.mp3&product_download_url=http://.../fil.php?s=srv0007&id=687474703a2f2f646174612e69706c617965722e666d2f66696c652f6975767239666f2f323030303130333537322f3331343330343737352f46616c6c5f4f75745f426f795f2d5f496d6d6f7274616c735f6269675f6865726f5f365f4f53545f2869506c617965722e666d292e6d70332f53495a4536373737343330&t=Fall out boy - Immortals big hero 6 ost.mp3&dl=1 (fall out boy immortals big hero 6 ost.mp3.exe)

1 / 68 (Malware)

http://dragonset.info/v377?self_redirect=0&product_name=COM Microsoft Office 2007.part1&file size=&product_title=COM Microsoft Office 2007.part1&installer_file_name=COM Microsoft Office 2007.part1&product_file_name=COM Microsoft Office 2007.part1.exe&product_download_url=http://.../get.php?file=ac33abec&m (c2fde3494b0554681fabd02b1aa50aa2)

1 / 68 (Malware)

http://dragonset.info/v377?self_redirect=0&product_name=COM Microsoft Office 2007.part2&file size=&product_title=COM Microsoft Office 2007.part2&installer_file_name=COM Microsoft Office 2007.part2&product_file_name=COM Microsoft Office 2007.part2.exe&product_download_url=http://.../get.php?file=6a4af029&m (1cfbfbe78d8992b524c0cc50a57b9398)

1 / 68 (Malware)

http://dragonset.info/v377?self_redirect=0&product_name=COM Microsoft Office 2007.part3&file size=&product_title=COM Microsoft Office 2007.part3&installer_file_name=COM Microsoft Office 2007.part3&product_file_name=COM Microsoft Office 2007.part3.exe&product_download_url=http://.../get.php?file=aa653269&m (7fbe0e6a7be24f7956b641c7561af2b0)

1 / 68 (Malware)

http://dragonset.info/v377?self_redirect=0&product_name=COM Microsoft Office 2007.part5&file size=&product_title=COM Microsoft Office 2007.part5&installer_file_name=COM Microsoft Office 2007.part5&product_file_name=COM Microsoft Office 2007.part5.exe&product_download_url=http://.../get.php?file=9982bad7&m (302f7536a43e41a620004327134623c8)

1 / 68 (Adware)

http://dragonset.info/v3500?self_redirect=0&product_name=William Lane Craig on Gay Marriage.mp3&file size=&product_title=William Lane Craig on Gay Marriage.mp3&installer_file_name=William Lane Craig on Gay Marriage.mp3&product_file_name=William Lane Craig on Gay Marriage.mp3&product_download_url=http://srv50.vidtomp3.com/download/.../William Lane Craig on Gay Marriage.mp3 ({blocked}.exe)

31 / 68 (PUP)

http://dragonset.info/v2921?self_redirect=0&product_name=11029009_651577224988251_549204838_n.mp4&filesize=1mb&product_title=11029009_651577224988251_549204838_n.mp4&installer_file_name=11029009_651577224988251_549204838_n.mp4&product_file_name=11029009_651577224988251_549204838_n.mp4&product_download_url=http://srv53.clipconverter.cc/download/.../11029009_651577224988251_549204838_n.mp4 (download.exe)

1 / 68 (Adware)

http://dragonset.info/v3500?self_redirect=0&product_name=Adam ?urica - MandolÃna.mp3&file size=&product_title=Adam ?urica - MandolÃna.mp3&installer_file_name=Adam ?urica - MandolÃna.mp3&product_file_name=Adam ?urica - MandolÃna.mp3&product_download_url=http://srv55.vidtomp3.com/download/.../Adam ?urica - MandolÃna.mp3 (adam _urica - mandolna.mp3.exe)

1 / 68 (Malware)

http://dragonset.info/v377?self_redirect=0&product_name=Jamu.IDM.6.2x.kuyhAa&file size=&product_title=Jamu.IDM.6.2x.kuyhAa&installer_file_name=Jamu.IDM.6.2x.kuyhAa&product_file_name=Jamu.IDM.6.2x.kuyhAa.exe&product_download_url=http://.../get.php?file=9297a331&m (93c62c2d7eec8473fe5cee4174760dc6)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Juntos Podemos (versión completa).mp4&filesize=1mb&product_title=Juntos Podemos (versión completa).mp4&installer_file_name=Juntos Podemos (versión completa).mp4&product_file_name=Juntos Podemos (versión completa).mp4&product_download_url=https://r15---sn-25ge7n7z.googlevideo.com/.../mp4&id=o-AIZWrCPqlol4isjJ9FBh8IF12ueNlsoc-d0QzsWKL4bb&itag=22&dur=146.099&ip=2001:41d0:8:6ede:f438:cdb1:4b27:6dea&key=yt5&&title=Juntos Podemos % (11a0.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=What Causes Constipation?.mp4&filesize=1mb&product_title=What Causes Constipation?.mp4&installer_file_name=What Causes Constipation?.mp4&product_file_name=What Causes Constipation?.mp4&product_download_url=https://r13---sn-25ge7n7z.googlevideo.com/.../mp4&upn=rnnIuRVcnzE&requiressl=yes&dur=57.957&&title=What Causes Constipation? (what causes constipation_.exe)

1 / 68 (Malware)

http://dragonset.info/v21735?product_name=imo free video calls and chat for PC&filesize=2&product_title=imo free video calls and chat for PC&installer_file_name=imo free video calls and chat for PC&product_file_name=imo free video calls and chat for PC.exe&product_download_url=http://cdn.bluestacks.com/public/.../BlueStacks-SplitInstaller_native.exe&locale=EN (61cd3ff03a32d91e4e2f9f5e2560c8bd)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Breve História da Cultura Africana.mp4&filesize=1mb&product_title=Breve História da Cultura Africana.mp4&installer_file_name=Breve História da Cultura Africana.mp4&product_file_name=Breve História da Cultura Africana.mp4&product_download_url=https://r1---sn-25ge7nek.googlevideo.com/.../mp4&signature=0DBB9029BFC0385766035F70F271A9429A7F090D.8F896B4A8CE706096FCAC89C2C2064A33F01F656&&title=Breve História (breve histria da cultura africana.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Taylor Swift - Blank Space.mp3&filesize=1mb&product_title=Taylor Swift - Blank Space.mp3&installer_file_name=Taylor Swift - Blank Space.mp3&product_file_name=Taylor Swift - Blank Space.mp3&product_download_url=http://srv62.clipconverter.cc/download/.../Taylor Swift - Blank Space.mp3 (taylor swift - blank space.exe)

1 / 68 (Malware)

http://dragonset.info/v2921?self_redirect=0&product_name=Jim Butcher and Skin Game at University Book Store, Seattle.mp4&filesize=1mb&product_title=Jim Butcher and Skin Game at University Book Store, Seattle.mp4&installer_file_name=Jim Butcher and Skin Game at University Book Store, Seattle.mp4&product_file_name=Jim Butcher and Skin Game at University Book Store, Seattle.mp4&product_download_url=https://r16---sn-5hn7snls.googlevideo.com/.../mp4&fexp=905649,907263,910100,927622,934954,935000,936118,9407433,9407557,9407795,943917,948124,951703,952302,952612,952901,955301,957201,959701&dur=6600.318&signature=4E386F14C784A3952F0ECC03D0EE1D486D21CEFD.369157AC74DD6796A82160C83F9B6B4BD4AA9F1A&key=yt5&ip=2001:41d0:8:bb29:e4:71 (jim butcher and skin game at university book store, seattle.exe)

30 / 68 (Adware)

http://dragonset.info/v2921?self_redirect=0&product_name=Zeds Dead - Dead of Winter Mix.mp3&filesize=1mb&product_title=Zeds Dead - Dead of Winter Mix.mp3&installer_file_name=Zeds Dead - Dead of Winter Mix.mp3&product_file_name=Zeds Dead - Dead of Winter Mix.mp3&product_download_url=http://srv69.clipconverter.cc/download/.../Zeds Dead - Dead of Winter Mix.mp3 (zeds dead - dead of winter mix.mp3.exe)

24 / 68 (PUP)

http://dragonset.info/v2921?self_redirect=0&product_name=LSD - You Decide.mp4&filesize=1mb&product_title=LSD - You Decide.mp4&installer_file_name=LSD - You Decide.mp4&product_file_name=LSD - You Decide.mp4&product_download_url=https://r15---sn-25ge7n7l.googlevideo.com/.../mp4&signature=19401B4670C4F17EC867B4F39DAC5631C081E57D.66EC135F74007C509267787C4A402E32DBB4CE27&key=yt5&sver=3&initcwndbps=3657500&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,pl,ratebypass,requiressl,source,upn,expire&ipbits=0&expire=1427299697&mm=31&pl=46&id=o-AFkjwFzUpPa62bnHtLYDt1mJB1--c5_euLAjh9p8nGIm&requiressl=yes&dur=850.732&ip=2001:41d0:b:41a:ed98:87df:de9d:a968&mt=1427277970&mv=m&fexp=900720,907263,916727,924627,929255,934954,9406984,9407103,948124,948703,951511,951703,952302,952612,952901,957201,961404,961406&ms=au&&title=LSD - You Decide (lsd - you decide.exe)

15 / 68 (PUP)

http://dragonset.info/v2921?self_redirect=0&product_name=Babes - Gvie Me Your Love, Nataly Von.mp4&filesize=1mb&product_title=Babes - Gvie Me Your Love, Nataly Von.mp4&installer_file_name=Babes - Gvie Me Your Love, Nataly Von.mp4&product_file_name=Babes - Gvie Me Your Love, Nataly Von.mp4&product_download_url=http://srv77.clipconverter.cc/download/.../Babes - Gvie Me Your Love, Nataly Von.mp4 (babes - gvie me your love, nataly von.exe)

1 / 68 (false positive)

http://dragonset.info/download/v2921?self_redirect=0&filesize=1mb&product_file_name=Black Pete in The Netherlands _ Zwarte Piet moet een kleurtje krijgen.mp4&product_name=Black Pete in The Netherlands _ Zwarte Piet moet een kleurtje krijgen.mp4&product_title=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&product_download_url=http://srv38.clipconverter.cc/download/sc2lqZOA3HuwZGpqm5qXcHFp5KWmqWxw4pSXam1in2ZrY2m0qc/MqHyf1qiZpa2d2A==/Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&installer_file_name=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&st=0&IX_Startapp=1&self_redirect=0&reffer=http://www.clipconverter.cc&project_name=ClipConverter&layout_id=8&for_html_installer=1&uuid=Zuxsms3AJo9l0Jyj1AaD7jbAw9nIznsuV9BwJtNEU1EKo9KZNujRirOmzfKnDZM9QVguDTRQmZJ3MNDFKHJvHvEPJLTLUGi6Eu3qOPOQdDoKvEjBX5lW4OZgFJV (shsetup.exe)

Latest 30 of 47 download URLs

The following 5 files have been seen to comunicate with dragonset.info in live environments.

TCP » 52.27.128.56:80

updating.exe

TCP » 52.27.128.59:80

download.exe

TCP » 52.27.128.62:80

updating.exe

TCP » 54.149.241.47:80

papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80

installer_game develop.exe

TCP » 54.69.228.231:80

download.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.