home

i.verrsin.net

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
verrsin.net

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.WeatherProtector.F, PUP.IphoneInstall, PUP.Installer.JenkatMedia.F, PUP.Installer.Yontoo, PUP.PC Utilities.SuperPCTools (M)
100.00%

VIPRE Antivirus
Threat.4786530, Rocketfuel Installer, Trojan.Win32.Generic
83.33%

Trend Micro House Call
TROJ_GEN.R047H05LN14, Suspicious_GEN.F47V1227, Suspicious_GEN.F47V0107, Suspicious_GEN.F47V0115, TROJ_GEN.R08NC0OA815
83.33%

Malwarebytes
PUP.Optional.StormWatch.A, PUP.Optional.BPlug, PUP.Optional.SuperOptimizer.A
66.67%

McAfee
Artemis!A3B5EDF1CA92, Artemis!9543BD540CED, Artemis!9EF3469DAF46, Artemis!861F50D379C0
66.67%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen, AdWare.MSIL.Swift, Trojan.Inject
50.00%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen, Win32/Virus.Adware.65c
50.00%

Dr.Web
Trojan.Domaiq.22, Trojan.BPlug.181, Trojan.NtRootKit.17923
50.00%

AVG
Jenkatedia, Generic, Adware Generic5
50.00%

Zillya! Antivirus
Trojan.Win32.1DB12147, Adware.SpeedingUpMyPC.Win32.3
33.33%

MicroWorld eScan
Adware.BrowseFox.BN, Application.Generic.1026423
33.33%

K7 AntiVirus
Unwanted-Program , Adware
33.33%

NANO AntiVirus
Trojan.Win32.BPlug.dfsehz, Riskware.Win32.OptimizerPro.dioyqs
33.33%

avast!
NSIS:BrowseFox-D [PUP], Adware-gen [Adw]
33.33%

Bitdefender
Adware.BrowseFox.BN, Application.Generic.1026423
33.33%

The domain i.verrsin.net has been seen to resolve to the following 24 IP addresses.

52.85.142.73
server-52-85-142-73.iad12.r.cloudfront.net
May 15, 2016

52.85.142.63
server-52-85-142-63.iad12.r.cloudfront.net
May 15, 2016

52.85.142.52
server-52-85-142-52.iad12.r.cloudfront.net
May 15, 2016

52.85.142.46
server-52-85-142-46.iad12.r.cloudfront.net
May 15, 2016

52.85.142.246
server-52-85-142-246.iad12.r.cloudfront.net
May 15, 2016

52.85.142.224
server-52-85-142-224.iad12.r.cloudfront.net
May 15, 2016

52.85.142.191
server-52-85-142-191.iad12.r.cloudfront.net
May 15, 2016

52.85.142.84
server-52-85-142-84.iad12.r.cloudfront.net
May 15, 2016

52.85.131.146
server-52-85-131-146.iad53.r.cloudfront.net
March 31, 2016

52.85.131.134
server-52-85-131-134.iad53.r.cloudfront.net
March 31, 2016

52.85.131.110
server-52-85-131-110.iad53.r.cloudfront.net
March 31, 2016

52.85.131.83
server-52-85-131-83.iad53.r.cloudfront.net
March 31, 2016

52.85.131.65
server-52-85-131-65.iad53.r.cloudfront.net
March 31, 2016

52.85.131.64
server-52-85-131-64.iad53.r.cloudfront.net
March 31, 2016

52.85.131.245
server-52-85-131-245.iad53.r.cloudfront.net
March 31, 2016

52.85.131.214
server-52-85-131-214.iad53.r.cloudfront.net
March 31, 2016

54.192.195.23
server-54-192-195-23.iad53.r.cloudfront.net
February 27, 2016

54.192.195.243
server-54-192-195-243.iad53.r.cloudfront.net
February 27, 2016

54.192.195.165
server-54-192-195-165.iad53.r.cloudfront.net
February 27, 2016

54.192.195.161
server-54-192-195-161.iad53.r.cloudfront.net
February 27, 2016

54.192.195.150
server-54-192-195-150.iad53.r.cloudfront.net
February 27, 2016

54.192.195.94
server-54-192-195-94.iad53.r.cloudfront.net
February 27, 2016

54.192.195.80
server-54-192-195-80.iad53.r.cloudfront.net
February 27, 2016

54.192.195.48
server-54-192-195-48.iad53.r.cloudfront.net
February 27, 2016

File downloads found at URLs served by i.verrsin.net.

28 / 68    (Adware)
http://i.verrsin.net/inst/software/4D54E257-8DA9-4D1F-993C-99D996A00F9A/.../platamooseSetup.exe  (9ef3469daf4634d1d20b28fba37c32c9)

4 / 68      (Adware)
http://i.verrsin.net/inst/software/1B7DC43F-EB3D-4632-9998-B29D1443A8EA/.../Setup.exe  (f11f625d502c9d5d426d50a9753b3c1c)

3 / 68      (Adware)
http://i.verrsin.net/inst/software/1B7DC43F-EB3D-4632-9998-B29D1443A8EA/.../Setup.exe  (8fa6a15ce1d128a7f627147b137705da)

6 / 68      (PUP)
http://i.verrsin.net/inst/software/983CF58D-1867-4D8E-9D25-9A0F1A3B023D/.../Setup.exe  (9543bd540ced172bea0c861f01162a01)

6 / 68      (PUP)
http://i.verrsin.net/inst/software/58469E13-5DA8-4677-8D99-59C645547170/.../WIE_2.21.2.26.exe  (qdonhxnc.ynk.exe)

33 / 68    (PUP)
http://i.verrsin.net/inst/software/629DB91C-F61A-4F73-8943-082FE96631DD/.../SuperOptimizer.exe  (b13cf885be5417cc5ecf069a90a0062c)

0 / 68
http://i.verrsin.net/inst/software/.../MPC.1.7.7.exe  (mpc-hc.1.7.7.x86.exe)

The following 21 files have been seen to comunicate with i.verrsin.net in live environments.

TCP » 52.85.142.224:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.94:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.94:443
online-guardian.exe

TCP » 52.85.142.246:80
browser.exe (Browser)

TCP » 52.85.142.46:443
browser.exe (Browser)

TCP » 52.85.142.46:80
GPlayer.exe (by Exent Technologies)

TCP » 52.85.142.84:80
emuletorrent.exe

TCP » 52.85.142.246:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.46:443
whatsapptime.exe

TCP » 52.85.142.246:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.246:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.46:443
messengertime.exe

TCP » 52.85.142.224:80
munk.exe (Munk)

TCP » 52.85.142.46:80
messengertime.exe

TCP » 52.85.142.46:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.224:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.246:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.224:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.224:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.246:80
geniecleaner.exe (Genie Cleaner by Oppoos.com)

 
Latest 20 of 35 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.