home

i.amazing-download.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
amazing-download.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.WecanSoftware.P, PUP.Bundler.Verti, PUP.Verti.WecanSoftware.Bundler (M), PUP.Verti.WecanSof.Bundler (M), PUP.Verti (M)
100.00%

Malwarebytes
PUP.Optional.WeCan.A, PUP.Optional.Useful
50.00%

Trend Micro House Call
Suspicious_GEN.F47V1203, Suspicious_GEN.F47V1220, Suspicious_GEN.F47V0328
50.00%

VIPRE Antivirus
Rocketfuel Installer, Threat.4786530
50.00%

McAfee
Artemis!A099AF31B982, Artemis!FE8385CAB0A0, Artemis!715EF79C9E54
50.00%

AVG
Wecan, Generic
50.00%

SUPERAntiSpyware
Adware.Rocketful/Variant
33.33%

K7 AntiVirus
Trojan , Unwanted-Program
33.33%

Sophos
Generic PUA GD, NextUp
33.33%

ESET NOD32
Win32/Verti (variant)
33.33%

Baidu Antivirus
PUA.Win32.Verti
16.67%

IKARUS anti.virus
PUA.Verti
16.67%

avast!
Win32:Adware-gen [Adw]
16.67%

ESET NOD32
Win32/Verti.J potentially unwanted application
16.67%

Dr.Web
Adware.Downware.9817
16.67%

The domain i.amazing-download.com has been seen to resolve to the following 17 IP addresses.

54.192.19.104
server-54-192-19-104.iad12.r.cloudfront.net
August 26, 2016

54.192.19.56
server-54-192-19-56.iad12.r.cloudfront.net
August 26, 2016

54.192.19.25
server-54-192-19-25.iad12.r.cloudfront.net
August 26, 2016

54.192.19.237
server-54-192-19-237.iad12.r.cloudfront.net
August 26, 2016

54.192.19.223
server-54-192-19-223.iad12.r.cloudfront.net
August 26, 2016

54.192.19.206
server-54-192-19-206.iad12.r.cloudfront.net
August 26, 2016

54.192.19.188
server-54-192-19-188.iad12.r.cloudfront.net
August 26, 2016

54.192.19.144
server-54-192-19-144.iad12.r.cloudfront.net
August 26, 2016

52.84.125.51
server-52-84-125-51.iad16.r.cloudfront.net
June 22, 2016

52.84.125.18
server-52-84-125-18.iad16.r.cloudfront.net
June 22, 2016

52.84.125.232
server-52-84-125-232.iad16.r.cloudfront.net
June 22, 2016

52.84.125.217
server-52-84-125-217.iad16.r.cloudfront.net
June 22, 2016

52.84.125.162
server-52-84-125-162.iad16.r.cloudfront.net
June 22, 2016

52.84.125.90
server-52-84-125-90.iad16.r.cloudfront.net
June 22, 2016

52.84.125.85
server-52-84-125-85.iad16.r.cloudfront.net
June 22, 2016

52.84.125.59
server-52-84-125-59.iad16.r.cloudfront.net
June 22, 2016

54.230.193.225
server-54-230-193-225.iad53.r.cloudfront.net
January 5, 2015

File downloads found at URLs served by i.amazing-download.com.

1 / 68      (Adware)
http://i.amazing-download.com/stub/WECAN/.../Flv2PCInstaller.exe  (a88b2fd0bf5956711d28a53a9ba938b4)

1 / 68      (Adware)
http://i.amazing-download.com/stub/WECAN/.../Flv2PCInstaller.exe  (21773d51b56ff115905028729620ab73)

1 / 68      (Adware)
http://i.amazing-download.com/stub/WECAN/.../Flv2PCInstaller.exe  (93f3a4086ddecc87294e3a24e85483e9)

19 / 68    (Adware)
http://i.amazing-download.com/stub/UINST/.../FixCleanRepair.exe  (4be456594564e9134c2372ef4705fd1d)

10 / 68    (Adware)
http://i.amazing-download.com/stub/WECAN/.../Flv2PCInstaller.exe  (fe8385cab0a0a545c1280046870603eb)

11 / 68    (Adware)
http://i.amazing-download.com/stub/WECAN/.../Flv2PCInstaller.exe  (c9b7c71f2f503f40a888bdce75dd5abf)

The following 121 files have been seen to comunicate with i.amazing-download.com in live environments.

TCP » 54.192.19.104:80
saber.exe

TCP » 54.192.19.188:80
browser.exe (Browser)

TCP » 54.192.19.144:80
uncheckitupdate.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.192.19.237:80
saber.exe

TCP » 54.192.19.104:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.56:80
dam_ay.exe

TCP » 52.84.125.18:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.237:80
saber.exe

TCP » 54.192.19.144:80
uvconverter.exe

TCP » 52.84.125.162:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.85:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.237:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.18:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 54.192.19.144:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.25:80
uvconverter.exe

TCP » 54.192.19.144:80
saber.exe

TCP » 54.192.19.56:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.104:80
gestalt.exe (Gestalt)

TCP » 54.192.19.104:80
SendoriUp.exe (Sendori Upgrade Assistant by Sendori)

TCP » 54.192.19.144:443
online-guardian-v2.0.9.exe

 
Latest 20 of 194 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.