home

www.citybesttour.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
citybesttour.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize.Liteinternet.Installer (M), PUP.Amonitize.Liteinternet.Bundler (M), PUP.Amonitize.Liteinte.Installer (M), PUP.InstallCore.AGORASA.Installer (M), PUP.InstallCore.RES (M)
100.00%

Microsoft Security Essentials
Threat.Undefined
2.04%

Dr.Web
Trojan.InstallCore.1411
2.04%

The domain www.citybesttour.com has been seen to resolve to the following 24 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 16, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 30, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 22, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 22, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 1, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 1, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 1, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 23, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 23, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.citybesttour.com.

1 / 68      (Adware)
http://www.citybesttour.com/c?x=e1Od5O1jxQV1KzuA0bp8JyXc3Gh5fscBHyhOBMmswt8=&c=MtKWC6ic5inY6 uf38Yq9vqr1RqzujkIgaNhEJO3pHlC9C38 cbF8ucds7CqxN7jp5PB4RbSA7t0DQ7podZaVH2UWL2exXzEKygVAkRKeeuydNBepHqjgGHnV2OGKIIH  (flashplayerpro.exe)

1 / 68      (Adware)
http://www.citybesttour.com/.../OIOSF5QueJSjj1yKGyeT0NC9XRbk=&c=q9M8ytu5pL1UcN6ezx3qHWa8ltO8uAFwKu1KCxVsQhHNNuqnhyYEll 3KEqiZpmJEoFzkdZt61fjuApizqMdujg50Q1wstUH65M66gd2fc8bRzHTL8mpk6d9ePnIVwoh  (videoplayersetup.exe)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=CzBzRlwEhBoRaGmhAN33IMUhiDeWKH89RzeifpNz/zU=&c=AWDXlszrnPyaieCfmIRK2s1al2G lg/XCgiykv02aah/SbYc2/pFZAy1YsowMFbUlJGDFCenhtxHg6yUcRHJw2ygOk5ROkFWDXtWudFS7FzyewH6Z3pN3Td4jVwQ/ZM4mTxJ/hVHxmWJ2yqwon7uUQ==&e=0&fallback_url=http://www.win-rar.com/fileadmin/.../winrar-x64-420pt.exe&downloadAs=installer_WinRAR_Unplugged_sciagnij.exe  (cc2d063a1d582ccf8d498686b5f58911)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=MJn5LmVT rNEwh8QEJfzF8qW8SyFJBOIZjDM8UWcFiY=&c=6L3xLq1C0tpdQKkM9qpLoVotPsUaW6LujugyUpQSeXmbxixsIpeCWa71OSaKHfXM207YM60KEdT4rgFxcSXanqk3gKnF3TDVccIJFG0wafJi5IxOQQrySgPrKMG0NZt/r p0wuYcoQbkhnoQLj1X8g==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../aresregular238_installer.exe&downloadAs=installer_Ares_sciagnij.exe  (bd3fcff6f11e4140225fe5667469d5af)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=L9hFUoLpzkramm58UwV0Re8a4 97IrwLuTzGrD4HNSA=&c=SmDIxbtXqbV0xD4Bvqlg6tB1zVGwv0cc4sGRilWkr9rSgV1KwtOWdKU8VJbYNab70j3VE6iycnlISxmfK0cqm5boXvla88GhC7Du6RiFWJFFbcWqn90BE SzHv7boHt7zfgmzx0kdGyaJ WhOS9RvA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe  (e450e04d1754537aa6d2d3d0c5d1a956)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=1mrntmUCHp8YKNpWevu10njQRSwxn0SYZZhEoNtcNwk=&c=rXOg/lwF1R8VlyK/HuEHgFS6i9K ozvyQkVzb8CWCASfEEUbNTl3WpeP3tgkI8ybAubLtccNfC2LR UjCvjLM/Ou9XhmM3u Y1Dhd8hYoo3P42iC4rkxNJGjboRS1HKI00RErRRPLC0lzL/gg22yg==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../Nero2015_setup_16.0.03000_3p_trial.exe&downloadAs=installer_Nero_sciagnij.exe  (0e6aafebf7b8d5c6d83ff321146edb0f)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=Y0fNOZtJ88BysnBvzcHWRez3PDvwCE3VaIFXnDLi48A=&c=ZgzntFGAbKaIQGqv0MyCjBZEvJrhZO0/OEBqsutt4oSpRCq3x8hY9CfMwHOk3nEcWVH5lZBfWGO7B/Qrwe/v 1sO48ZZvkctKrE4QkFjPmUBzOi5hT/dPbOFKn9FEUyiaM/RJ4WHxwMYefBfGoamtQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe  (c3d6f702c2f725d389ad11030cac50d6)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=Fi/gn4fFLVFZ/lSBSfsdjmHiwv0KgWtaN80 hjMa688=&c=YkaEH4 t2A43nFI5DytA UYy97Q38YUyL2Wt90zdH5elqQgSAd6I5kpqY3qJN4OHrZuo4lY9fIo9Lruo0RgMGoxOR12B9uDdr/qC3t5ET/o/.../B6UXv9dGb67Y  (flashplayerpro.exe)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=yyieX6NCGtaguvjwkVTcGeJbsvFhH4bmXWLixXM9JWg=&c=fQsQuiq2gPYxVODE5Zi60gJvE1oV84o5oF8dQhzAw03LzTK dvlT0xxcphd diRtAH2KWiwIqqJX/b 4C 26XsdQX0RCDRk 8mX6wjC48aYbmV8gK6bz3II/BHyJeVD9mmrANv040nIEFvP83GJ7yg==&e=0&fallback_url=http://screenshu.com/p/_download/latest/.../screenSHU-setup.exe&downloadAs=installer_screenSHU_sciagnij.exe  (cd637494db030efbbc8f3c8951875b5b)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=fAM99zQjF0R/EFmNZK5KxlGK/t7Fz2cHDidJwGRW35U=&c=dv4jNAkgCUzmCPhZKZ5M12Ex/C36AVB5lvP6If2JQ6JwRNL55ZMDEO5EOQ4Itj9KA7tmf0qVARhCs4dlyGEnu3 1rZlgJj5e2u5QPC3VVEAJJAAAQ3L2SinjSQMVrHZnxPnPiDC0931jM YdJ8O1zQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe  (e450e04d1754537aa6d2d3d0c5d1a956)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=Q55mhWgd5QyflrhpDOHWYvfZp7WYfsuAjgSTh82IrVM=&c=YE/FLOlWPGfMOKbXmcscMb5j0jw5mKxgbbwRs/HMx yvl6Nx6ejHycvk0EMs5hA8EtpBJgX1UIZ7ksfVDutI696ChbyNqdzJT5N2wFYeWyslxr7vu70h4bxjV//zSL3XyKIFFHskRb0kBLXkCGS/rA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../sims3pce3trailerpv10su_uk.zip&downloadAs=installer_The_Sims_3_Trailer_sciagnij.exe  (d1f9637a032f8232f2aa084ab876d558)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=l3JQf84aHEzdxlL/wtjNTLIMqC4kI5bvBE2FpV/529Y=&c=Z8u Z7zxCuBou7z6UGwvawiVK2Ip xAD2u9Oey2VcSeZyLzrWg4UzMXVZxtdvVCrBiL6Ofec34txTgMdLpkj26se55UwzRDMz2XUmjtw3z4vaQcvfVEzzDIyC12dYpHs01wgk8JE9 GLLj038Fh8oQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../fraps_setup.exe&downloadAs=installer_Fraps_sciagnij.exe  (b19ef2ee34fbb2eace07b5149aad1d21)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=unKrivUU1bReFe/IgK9cX3A2uSXiD0qplVCq5trOL/Y=&c=wfai2QUW5hSaEwALO XMnHeJpNOPc4YZNjv8TNPwH5cYsl7kVDjGkKmIUaiydPxDG/WvWJirwnbZlDNycVgLFrzCQYGJWrOz/ gaLczPu/ngEMhrfc1qtDRgZcBu532whDf0ambwI4HwjfeGbRqYfw==&e=0&fallback_url=http://.../download_127.shtml&downloadAs=installer_Sammy_Suricate_sciagnij.exe  (2bc466cf736c5987fce593082efa9a3d)

1 / 68      (Adware)
http://www.citybesttour.com/.../CgaFzqlEndG4gwCee hxIto=&c=f5ABbHsGS5ticzGyZ0Er w4awVb2jVIifRxtsURGPya4XZmLdwB ShvGQirqt9JVm4F0BjF1SLQWIJcPLBQEEnl3eCmvLRIyM966pkPHN0dI4mYk7AxiAvgnVfCB3bUw  (flashplayerpro.exe)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=IPDgVZBsbcRp8sBmnCH24GRt4aipgHvTl1lfBGu8ALw=&c=fOTQI5v5hb0SGB723Y3DeIT1az6R67mTNCdztNyy6ZEmw1K203XG KC/wrkiyUqamM 8A5RkwWbgLhbBP/xqPdfsXJVzL1QHHusba5/SOwBiPp6 xJZDUjS8Z7TRR2dVPlq5iXbQUyDIVUN ggrHdg==&e=0&fallback_url=http://www.sciagnij.pl/.../1,93141,17916935,Program_aktualnie_jest_niedostepny.html&downloadAs=installer_Ultimate_Mortal_Kombat_3_sciagnij.exe  (736f1e9c2fc9fb3f7f0cd9fe9db8db10)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=lWDxRW26sRD rzfPkxF1oGAOOMIWLehI1MxLn3IL260=&c=owMqq29naOxg4wXkQd3b8mmAf18O qTEdO/N4lWRxWi9h/krEnSi17LnxNPNZlqMhP0HHfnJBIjbK1gwcHcBcQO0S9rX2Vkn0N5aYeM/ijUjJ52jsyVqDaSIZNz2FgnBblIOrzaYuPdPoF2Nidf/KQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../setup_karta_0.exe&downloadAs=installer_Karta_rowerowa_sciagnij.exe  (b7veitsd.exe)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=Gx5eAddoATbG3eORsUDsCu9FZH1o2SJIpNQBcqJYGCw=&c=FGzCKk6EhY6PNVY8uFMWNVsvKaSYE0uo7yUSeSZ5QD2/C5h53gXwZ3xW3K epFGeazuiq7 XXeIHUOJievjfFaPXWhES9Q7N0/Vn2 wWtfFn65v179cD0suqacuODl1kvxTmxnukrM6 sVfKmTZncg==&e=0&fallback_url=http://www.microsoft.com/en-us/.../details.aspx?id=11132&downloadAs=installer_Photo_Story_3_sciagnij.exe  (1d3dc35e0d1e8e674673084983abf2a0)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=TGJQ6WyPDHudMQfPi7rIcxfMD4CMH4x0zmbrRddkM0A=&c=QBv1n/haAUlu41cdkOZlH5KLmtFph0QpsVGUMXJS62pSIEUP2ryJkmGYMyU5Yc0WQZo9LbAlkehSAW5zKVRFXQZmp1yE6Y9KX3AQvKUmPQeFqydY5SKoP6ov/OatEgN5//Nc6D34PzrepFruBDpHJw==&e=0&fallback_url=https://chrome.google.com/webstore/detail/.../gighmmpiobklfepjocnamgkkbiglidom?hl=pl&downloadAs=installer_AdBlock_dla_Chrome_sciagnij.exe  (1fd1ba84be8e35949bc3aad09e6ec3e1)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=2RTVipX/Zb2RC53cvf3ziti9yiGyGTUFJDjFGGW33FU=&c=lcwjcshC/IbSK fnie5xsvTobsJGI 9Gf5QjbDoufmwUAY0YW8CFRsKe7DDJAbUKbu4KihIlOfuaO/ffdL9FJxhFT8iMqXIsiVtNeoZaodBrBaRdbMBLWpiuIBprR4mQyJ01lAhqzjahsuwpaBcgxw==&e=0&fallback_url=https://www.origin.com/pl-pl/store/.../demos-trials-ANW.html&downloadAs=installer_FIFA_14_PC_Demo_sciagnij.exe  (52baaf84cfd7c57aebb01e84fb13f7d9)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=GnOEQeAtGoMIIt8m0M0zwyGnVx0q4pby4F0sW47klSM=&c=PA5bms809DBXZzBnZg2NlkWabVjc2bEi81vWX9MhzRS3gMa9kP9soUPjGh6ryfWQQ6 SAgljgbg6uuEsy/lmQwsE/ambHr2VNxgem07glcICweHeC/2d leTQN/VgD327ZLWO8U7elkxVSraz8NcIg==&e=0&fallback_url=https://drcdn.blob.core.windows.net/msoffice/pub/.../X14-02658.exe&downloadAs=installer_Microsoft_Works_sciagnij.exe  (bd30fd67b27b9892756ba31bdca2a1ef)

3 / 68      (PUP)
http://www.citybesttour.com/c?x=mRB8zrCId0S751 L VBRhVHnn0hG/B5yYmEn4arpg08=&c=XcPeIkM1C7HPq8hY16rWdrHMSk8NtLGIPYrLu7ZCD3xTb rhH8UztaGfZkB2hgcXs2VZYEdHle2zSeBqM2pypMRTaBU7qUphzCBl80sb61/N3KcjOvzTlv/800EDuWuZ4yCoUUE3PA25enwwbUIsSQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (7f54be3d0f87fefd9605d99517343080)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=B5iLSyONZwwP3x4NMWKl/zUccusK1a9vZ/9s9JgcXZc=&c=2u7tonldvp yP0yzEiini4cBAK9Aq5iaFInEZwYYvvfrHCpXS8xUbCuhODuyVmAqcuZhxA2TB7SD8sFWJb2z9JeX3v3UROay nScQkkU8ukGla3Ji6xkXXpAj HyF2FHHCaIRYz0CmQjn1LZNFpiPg==&e=0&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe  (8c7fe96122d239ba050213b845d49729)

1 / 68      (PUP)
http://www.citybesttour.com/c?x=kYRpnpWyQXwSKmJnx63Wjwe6BLm9Yv2vgDOIWitpPvU=&c=UWfKlO6 ov4TsBXDD/ljlPNzIJOH912Hnu/v lVYyp4G63h6cDieviBfeJ8UVrgSEr FzdHomF2805tDrAM9AqsPclgo3pCwxYRpnJUa/J7aj dpd5omEuFITi3M5SdFO3amOWXwHQBJY0Zv2UwnWA==&e=0&fallback_url=http://.../STOPzillaAVM_Setup.exe&downloadAs=installer_STOPzilla_AntiVirus_sciagnij.exe  (f68260c37e3750e1904e97a8d55dff6d)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=wKo FRHNj9oR2vvfMu8teQPn0aB3tlvTsfR2v4xD9Po=&c=s/.../ft6acCF7KUMhv6fQKWakl  (flashplayerpro.exe)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=szkUWshNYphipH4TdZGQ0booix/na65/.../Ua9yWhHU2N5ydw6qlKhJLyeCV1sE5HeFO lW5OT5gPZ78VUxGm8cBUSS4WLMAkn2YvT  (videoplayersetup.exe)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=tyayY/.../JN09kEMDbsNb81H8NJcmUbHHLonP5cBvOFlnhifW5Yjk8DPurhot3wFj5eKFMYiBjHhUIl9QEOHMD7Uhgp  (flashplayerpro.exe)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=CqqxH3aS3rR2iL1mN0j6dWqYWtqG0GpuMmRDwm076Gs=&c=kf/.../uYiPspWdehfOnO mqW6YdUvyG jC5lWHTODwzbrYmIjeeK6iygWd2IGg0Rr7nPUoLDeI3JDYhf7xSMKYTMlnlMObUdT  (videoplayersetup.exe)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=rD9EpDSdY90F4nr M9ZKC6aN1zPvWxzG2L2g19q4XGk=&c=Zsp0PDIqp 4S5Akxk2sDf5vgUWjpkhYj3FlBtWBOfv3VUocYVdFY5tT0Mq4i5L7cLvW6ClrnfrkiMl8kVZ86BzhCG52lnDbs0avEXGZjZrn3jnVHVMyWPlmYpg 9o3Nk  (flashplayerpro.exe)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=LC8YTZZeLi3dPBr8//l9Xv00Kz4t6Qt8OxH54BLVgac=&c=BZL5eyY26XFYHNRxoxMBQBR0eFQEi/nK/u0a FHsVRE0zZ6g6rVjZ/X6VucCHZvnW05/.../6sxEmcbwDx6Xq6hMhTtM3SxViaJRVzmGkwUptnCewVd  (flashplayerpro.exe)

1 / 68      (Adware)
http://www.citybesttour.com/c?x=Gcc6DDp38zznBkk36Y0if66V2maPRnNe e19tbgyOBA=&c=nz9QXNQEQJUF2PivLcHU4LmThum8ca5y1ndNzlmZ 5sJxmXW8hcVNTyYdkDy0BhrqHWBfxbvg/.../hF3USItXlzn5X92A7KIr1dBOb5Q65XtTUpMWUMZcliyJLUG63  (flashplayerpro.exe)

 
Latest 30 of 54 download URLs

The following 36 files have been seen to comunicate with www.citybesttour.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.