home

fasternations.com

Amir Derbinin

Domain Information

The domain fasternations.com registered by Amir Derbinin was initially registered in September of 2014 through EVOPLUS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
EVOPLUS LTD

Server location:
Dublin City, Ireland (IE)

Create date:
Sunday, September 7, 2014

Expires date:
Wednesday, September 7, 2016

Updated date:
Monday, September 7, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:
2 fasternations.com records

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Adware.MultiPlug.DZ application
100.00%

avast!
Win32:Agent-AUVV [Trj], Win32:FakeDownload-G [PUP], Win32:Agent-AYLT [PUP]
94.12%

Emsisoft Anti-Malware
Gen:Trojan.Heur2.FU.9uW@aSdgm0ei, Gen:Variant.Adware.Mplug.21, Gen:Variant.Adware.Kazy.511922, Gen:Variant.Adware.MultiPlug.20
88.24%

AVG
Adware Generic6.BHF, Adware Generic6.BHT
88.24%

Norman
Gen:Trojan.Heur2.FU.9uW@aSdgm0ei, Gen:Trojan.Heur.JP.9uW@aWZVa9pi, Gen:Variant.Adware.Kazy.511922, Gen:Variant.Adware.Mplug.21
88.24%

Dr.Web
Trojan.WebPick.3190, Trojan.WebPick.3219, Trojan.Crossrider.36840, Trojan.Crossrider1.31000
82.35%

McAfee
Program.MultiPlug-FTL
58.82%

VIPRE Antivirus
Threat.5180739
47.06%

Lavasoft Ad-Aware
Gen:Trojan.Heur2.FU.9uW@aSdgm0ei, Gen:Variant.Adware.Mplug.21, Gen:Variant.Adware.Kazy.511922
29.41%

F-Secure
Gen:Variant.Adware.Mplug, Gen:Variant.Adware.Kazy, Variant.Adware.MultiPlug
29.41%

Kaspersky
not-a-virus:AdWare.Win32.MultiPlug, not-a-virus:HEUR:AdWare.Win32.MultiPlug
23.53%

Avira AntiVirus
ADWARE/MultiPlug.Gen7, W32/Chir.B
23.53%

MicroWorld eScan
Gen:Trojan.Heur2.FU.9uW@aSdgm0ei, Gen:Variant.Adware.Mplug.21, Gen:Variant.Adware.Kazy.511922
17.65%

NANO AntiVirus
Riskware.Win32.MultiPlug.djsutk
17.65%

Bitdefender
Gen:Trojan.Heur2.FU.9uW@aSdgm0ei, Gen:Variant.Adware.Mplug.21, Gen:Variant.Adware.Kazy.511922
17.65%

The domain fasternations.com has been seen to resolve to the following 8 IP addresses.

54.72.9.115
ec2-54-72-9-115.eu-west-1.compute.amazonaws.com
September 13, 2016

52.24.5.45
ec2-52-24-5-45.us-west-2.compute.amazonaws.com
February 12, 2016

54.213.23.40
ec2-54-213-23-40.us-west-2.compute.amazonaws.com
September 16, 2015

52.26.16.139
ec2-52-26-16-139.us-west-2.compute.amazonaws.com
September 16, 2015

52.25.206.149
ec2-52-25-206-149.us-west-2.compute.amazonaws.com
September 16, 2015

52.11.81.80
ec2-52-11-81-80.us-west-2.compute.amazonaws.com
September 16, 2015

54.213.128.72
ec2-54-213-128-72.us-west-2.compute.amazonaws.com
May 3, 2015

54.69.220.239
ec2-54-69-220-239.us-west-2.compute.amazonaws.com
May 3, 2015

File downloads found at URLs served by fasternations.com.

0 / 68
http://fasternations.com/.../Download.exe  (67b68ffc44472cd968cd3f43ff15df5c)

5 / 68      (PUP)
http://fasternations.com/.../Download.exe  (2c7bb335084a0293e029b93ab177f47c)

5 / 68      (PUP)
http://fasternations.com/.../The Godfather 2 Fully Full Version PC Game Download.exe  (7413a11828d14522ad5c8decd88a0789)

8 / 68      (PUP)
http://fasternations.com/.../Download The Legend of Korra S04E07 Reunion WEB-DL x264 AAC Torrent - KickassTorrents.exe  (a77b162a28c7696c9d1e56eafa73c023)

5 / 68      (PUP)
http://fasternations.com/73f316a5da88546c27e0ef6096736738/all_in/dl.php?id=1417780612237414318&r=http://fasternate.org/hp/?q=yG09XkCZwlpy/abcde/ik 0mV5eaqwtSkJE7xriLe 8pqKOEK9R5wTRUZL3F4P6FstgBDitNkB/SKMJabgTWpEfR6to3uaxQjYLN7pZ9BuG9pSLnHkrJGKxV0ziTCPn bR/.../X0vfCguPiJAgiE5GsClTL1&__rnd=86e55ecd7a539dc46f2a444a03cd648f  (download.exe)

9 / 68      (PUP)
http://fasternations.com/.../Download.exe  (17e30cb56c8e1648a2568e0713a57f2c)

7 / 68      (PUP)
http://fasternations.com/.../Download.exe  (a3d9f3b1e68bae7d924c4effd4053bd2)

7 / 68      (PUP)
http://fasternations.com/.../Download.exe  (6e0364e5c6f4b8f045f781daed848daa)

4 / 68      (PUP)
http://fasternations.com/e84e09e754a371892afa3bca52969451/aq_b/dl.php?id=1417793978517492072&r=http://fasternate.org/hp/?q=CH09Xj7VQOL33lhabc8131IaylJePAmTybfTHiEhCs3FKts1U1WM4D0GtlR53WRAoN/3BYwdoHCskrCN7KEtkZCzxO9VISRn37n8nPTUcIhBhEtOXdyXite7AbwxC2NHTyJ37dsxm PvlXEgqk5RR2p76SK38fWQWGMoy8zpX3bzJBCz Msm4zgGfnMm2GanCnR4nZ8axLhoRY /k8sOq9NS4E/pkDJVCG4yMRK5evAXk WkJX ol6nalri4zr76V9UG72B5SPUz3LuxDouQ2KfUWlRxI51n37SMBRlu2 tjZ7pBodhILnzNZR i fOt7j2f146McZCB/t/R508L9w tYmoBw86m0aCgeucYgUpAM/MaMQppvaCE7ZCE3n4n /i6yRxcDYxUHMoGUyqjNqOBPAcmQxKp607hmKyPZHxHnBiIAUfdRna0zftzVzMC8/.../TfD&__rnd=a9ca744dee2420e4418cbe3c8275c5b3  (windows 7 loader activator v2.1.9 free download.exe)

6 / 68      (PUP)
http://fasternations.com/.../Download.exe  (bf1b431a9a1122ad62d9559d44b83003)

8 / 68      (PUP)
http://fasternations.com/.../Download.exe  (1c74226a10853e1f9de503a1e768d675)

7 / 68      (PUP)
http://fasternations.com/.../eset nod32 antivirus 7 final proteja su sistema contra amenazas online.exe  (f51e877b6b50787b531b3ac2e30b1946)

9 / 68      (PUP)
http://fasternations.com/23090d8fed8fc8168e92fa149ee8e511/nobel/dl.php?id=1417789319076620295&r=http://fasternate.org/hp/?q=dFp4wDxgZIcLXZTVNP EZP/u46w8N8PySpvI4ieemMClrNQGzxXHKokqhQY2Dd3mLEgiP1o7yZGt6VfDfl8iLGtNBhZEGyQIS8NsVgH4xeaOSdeg/9sUQfCwRMLKAqFlYgRACNCcot21/R1CN0zcHBTeXEdhCkiaOkEV9r5C uDfx5GPpFMTIhhY8ZTaUA0TVDT/ElDYxEd7igBq4XKq6VQRmWLe0v6EY7510gd8XpZa Mpj73St8uMy2PPpLJr hXLiVFMn6D2bqBykrD8HxMX5wslhHS3lXyTW 0lawd2SXkNpAPla6FiSGsTInmwZjElns9K1OuqOzPFP15G18F22 IuCowqjZhhrhq8y2LPesjsnLAtWLx3sPXDnX0uTb5MODoY pwHXueiGL/.../Dt8QRSuj8vlpRgLVkF8smL5lu2EC3GW&__rnd=a5ecc7622702ca04fdeebc8e23c3278a  (spyhunter 4 crack, serial number full free download.exe)

9 / 68      (PUP)
http://fasternations.com/.../Download Shollu Free 3.10 , Pengingat Sholat | Tutorials and Software.exe  (download shollu free 3.10 , pengingat sholat - tutorials and software.exe)

9 / 68      (PUP)
http://fasternations.com/23090d8fed8fc8168e92fa149ee8e511/nobel/dl.php?id=1417789319076620295&r=http://fasternate.org/hp/?q=dFp4wDxgZIcLXZTVNP EZP/u46w8N8PySpvI4ieemMClrNQGzxXHKokqhQY2Dd3mLEgiP1o7yZGt6VfDfl8iLGtNBhZEGyQIS8NsVgH4xeaOSdeg/9sUQfCwRMLKAqFlYgRACNCcot21/R1CN0zcHBTeXEdhCkiaOkEV9r5C uDfx5GPpFMTIhhY8ZTaUA0TVDT/ElDYxEd7igBq4XKq6VQRmWLe0v6EY7510gd8XpZa Mpj73St8uMy2PPpLJr hXLiVFMn6D2bqBykrD8HxMX5wslhHS3lXyTW 0lawd2SXkNpAPla6FiSGsTInmwZjElns9K1OuqOzPFP15G18F22 IuCowqjZhhrhq8y2LPesjsnLAtWLx3sPXDnX0uTb5MODoY pwHXueiGL/.../Dt8QRSuj8vlpRgLVkF8smL5lu2EC3GW&__rnd=a5ecc7622702ca04fdeebc8e23c3278a  (spyhunter 4 crack, serial number full free download.exe)

11 / 68    (PUP)
http://fasternations.com/.../Download Winrar 5.01.7 For Life Time Free Full Version.exe  (4a1ff389173b171481ac80e4abc7db6a)

26 / 68    (PUP)
http://fasternations.com/c28f4d346aed5a3b12e91c12ac267577/chicofilm/dl.php?id=1417785491283243584&r=http://fasternate.org/hp/?q=dKIqm3mb1pAtRNPRJLtb1h1lg3tgMV/kzYslC6GbuPn2KHsZSSseljj5/.../aPB C2FxuCs4nvAcnuCTbrcUdEvukdaD0vWjZIzcoOXUPHd5RU9wOd1piD244Uppkj10Ln3N&__rnd=6e16a008c29e8858baabe374b39f6a65  (download.exe)

26 / 68    (PUP)
http://fasternations.com/c28f4d346aed5a3b12e91c12ac267577/chicofilm/dl.php?id=1417785491283243584&r=http://fasternate.org/hp/?q=dKIqm3mb1pAtRNPRJLtb1h1lg3tgMV/kzYslC6GbuPn2KHsZSSseljj5/.../aPB C2FxuCs4nvAcnuCTbrcUdEvukdaD0vWjZIzcoOXUPHd5RU9wOd1piD244Uppkj10Ln3N&__rnd=6e16a008c29e8858baabe374b39f6a65  (download.exe)

0 / 68
http://fasternations.com/null  (simpleserver.exe)

24 / 68    (PUP)
http://fasternations.com/.../Download.exe  (067541d417d519b77ea504841678d549)

14 / 68    (PUP)
http://fasternations.com/49c0d4cbe8caf02721b84f28f93c53b6/aq_b/dl.php?id=1417781417592207869&r=http://fasternate.org/hp/?q=kmi6sRF 2AZsUIKEG plf9FO6y1/Pm14EnN75ldiHREOAvZuBLHJjm6KROp8JLTe1SpFPnhpvpeshMvnVa3alwT1LZ yreQg5qLNkJTMj8nQdEt4s1BoitkEIlPA/e4rV3EkhnMnvWHIW9O7XSOf7s1i3Vr0YmtdT1bbejTWBzyP5KySMBRN92HCGM8xc VYWtxypXrmMDDgy8MbU7OwfDC9UA3s4jrMu/NqIRpwEN gVx8E7osCIW93N3iq1SbjtKJA7YKnz6oQLAneRl5JFjriDNUqb7jxKhhf5kBYeM8fuLI eCDjiciGI1o8UxBzmf3U/T06nNl6sFuI2hAjp6/RBiJwoHRJl4dJ/.../Yu4yxviynPi&__rnd=12388630bb0933ba5f5118117ccf46e9  (windows 7 loader activator v2.1.9 free download.exe)

The following 275 files have been seen to comunicate with fasternations.com in live environments.

TCP » 54.72.9.115:80
globalupdate.exe (globalUpdate Update by globalUpdate)

TCP » 54.72.9.115:443
Softonic.exe (Softonic)

TCP » 54.72.9.115:443
Softonic.exe (Softonic)

TCP » 54.72.9.115:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:443
Softonic.exe (Softonic)

TCP » 54.72.9.115:80
optimizerpro.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80
1573.exe (SavePass 1.1 by OB)

TCP » 54.72.9.115:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:443
Softonic.exe (Softonic)

TCP » 54.72.9.115:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.213.128.72:80
234498.ftf (Super Optimizer v3.2 by Super PC Tools)

TCP » 54.72.9.115:80
5dfde4f5-80af-4a98-8da4-e95b948f183d-10.exe (Ge-Force by Webar)

TCP » 54.72.9.115:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.115:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80
shopwit.exe (by Pay By Ads)

TCP » 54.72.9.115:443
Softonic.exe (Softonic)

TCP » 54.72.9.115:80
pricehorse.exe (by Pay By Ads)

TCP » 54.213.128.72:80
175124.ftf (Super Optimizer v3.2 by Super PC Tools)

TCP » 54.72.9.115:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.115:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 294 files

URL:
http://fasternations.com/

Title:
“Welcome to nginx!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
ngx_openresty

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.