get1.fdg345.org

OutBrowse LTD

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Outbrowse.Installer.Outborwse, PUP.Outbrowse.Bundler, PUP.Systweak.ThePhone.Installer.Meta (L), PUP.Outbrowse.diRECtDowNlOadgtT.Bundler (M), PUP.Outbrowse.Outborwse.Installer (M), PUP.Outbrowse.VERifiedsoftwaresnb.Bundler (M), PUP.Outbrowse.ruNappSforeVerllD.Bundler (M), PUP.Outbrowse.diRECtDo.Bundler (M), PUP.Softpulse.SmartSec.Bundler (M), PUP.Outbrowse.STARTNOW.Bundler (M), PUP.Outbrowse (M)
97.87%

AVG
Potentially harmful program Downloader.GLW, Potentially harmful program Downloader.HXI, Worm/Delf.KKS
12.77%

Dr.Web
infected with Trojan.OutBrowse.655, Trojan.OutBrowse.677, Trojan.OutBrowse.754, Trojan.Inject1.28681
12.77%

ESET NOD32
Win32/OutBrowse.CC potentially unwanted application, Win32/OutBrowse.CB potentially unwanted application, Win32/Delf.NRJ worm
10.64%

Trend Micro House Call
Suspici.83A8BFB7, Suspicious_GEN.F47V0524, Suspici.C4DF53FA, Suspici.F4AF8F21
8.51%

Fortinet FortiGate
Riskware/OutBrowse
8.51%

McAfee
Artemis!17829CEFAD9D, Adware-OutBrowse.g, Program.Adware-OutBrowse.g, Virus.W32/Gnamer
8.51%

avast!
Malware-gen, Win32:PUP-gen [PUP], Win32:Agent-AODJ [Trj]
6.38%

NANO AntiVirus
Trojan.Win32.OutBrowse.drzddf, Riskware.Nsis.OutBrowse.dsqgay
6.38%

K7 AntiVirus
Adware , Unwanted-Program
6.38%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, Threat.4775899
6.38%

Kaspersky
not-a-virus:AdWare.Win32.OutBrowse, Virus.Win32.Renamer
4.26%

Emsisoft Anti-Malware
Dropped:Trojan.Generic.14606224, Worm.Generic.377772
4.26%

Quick Heal
PUA.OutBrowse.A
4.26%

MicroWorld eScan
Dropped:Trojan.Generic.14606224
2.13%

The domain get1.fdg345.org has been seen to resolve to the following 40 IP addresses.

ec2-54-175-102-143.compute-1.amazonaws.com
May 16, 2016

ec2-54-225-72-141.compute-1.amazonaws.com
April 9, 2016

ec2-107-20-138-96.compute-1.amazonaws.com
February 27, 2016

ec2-54-225-153-30.compute-1.amazonaws.com
February 27, 2016

ec2-54-243-107-26.compute-1.amazonaws.com
February 24, 2016

ec2-54-235-203-221.compute-1.amazonaws.com
February 24, 2016

ec2-54-243-166-148.compute-1.amazonaws.com
February 20, 2016

ec2-23-23-73-75.compute-1.amazonaws.com
February 20, 2016

ec2-54-225-222-50.compute-1.amazonaws.com
February 11, 2016

ec2-23-23-109-139.compute-1.amazonaws.com
February 11, 2016

ec2-50-19-235-235.compute-1.amazonaws.com
January 30, 2016

ec2-54-83-202-41.compute-1.amazonaws.com
January 30, 2016

ec2-54-243-81-131.compute-1.amazonaws.com
January 27, 2016

ec2-50-19-219-164.compute-1.amazonaws.com
January 27, 2016

ec2-54-243-82-212.compute-1.amazonaws.com
January 27, 2016

ec2-23-21-153-169.compute-1.amazonaws.com
December 15, 2015

ec2-107-22-255-32.compute-1.amazonaws.com
December 15, 2015

ec2-54-235-123-16.compute-1.amazonaws.com
December 15, 2015

ec2-174-129-252-179.compute-1.amazonaws.com
December 2, 2015

ec2-54-243-92-113.compute-1.amazonaws.com
December 2, 2015

ec2-23-21-217-154.compute-1.amazonaws.com
December 2, 2015

ec2-174-129-207-140.compute-1.amazonaws.com
August 22, 2015

ec2-107-22-215-47.compute-1.amazonaws.com
August 22, 2015

ec2-107-21-217-57.compute-1.amazonaws.com
August 22, 2015

ec2-54-235-245-130.compute-1.amazonaws.com
July 1, 2015

ec2-54-225-181-53.compute-1.amazonaws.com
July 1, 2015

ec2-23-21-50-227.compute-1.amazonaws.com
July 1, 2015

ec2-54-235-209-215.compute-1.amazonaws.com
July 1, 2015

ec2-23-21-48-5.compute-1.amazonaws.com
July 1, 2015

ec2-107-21-235-16.compute-1.amazonaws.com
July 1, 2015

 
Showing 30 of 40 IP Addresses

File downloads found at URLs served by get1.fdg345.org.

1 / 68      (Adware)

 
Latest 30 of 54 download URLs

The following 3 files have been seen to comunicate with get1.fdg345.org in live environments.

URL:
http://get1.fdg345.org/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.0 (ASP.NET) (Version: 4.0.30319)