home

www.contentdltour.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
contentdltour.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.AGORASA.Installer (M)
100.00%

The domain www.contentdltour.com has been seen to resolve to the following 16 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 26, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 19, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 19, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 2, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 26, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 26, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 26, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 27, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 27, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 27, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 27, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 27, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 27, 2016

File downloads found at URLs served by www.contentdltour.com.

1 / 68      (PUP)
http://www.contentdltour.com/c?x=wVv/N5Dmn4p5 EQ1K0kE2CTYjY840nX73dLmQPznP7w=&c=xbA17Cw/GtiOd70xxoItDUcJuFVVf1OwTE5kV2t077el JTdUJlm4SkDpQZGb esI7hLZtwoDgjRYtf 41fg3UkMXbdxrXOMX8k9VzmeURhzrXflo1R0IjWWjHQIPnwYlXQxmjMOOZx9jOJuS60nQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Word_sciagnij.exe  (6768c83cfed1b2c06812c0c65ff47927)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=80vzcHRfGCy5m3y0UdkDSI7H4ztMZhEQEJAokiJGDXM=&c=nViDFt7vdGaaNlUMfIJzsKg4Nwm2yiPxVM4Ww7ztCkfzGAnYZQJIqrHCEeE7ZkvJxywVnpk2Anmu0GZW3yM5rcif9ccaQAOjOfUpAsmgCLjGvCt54kh9VePJpO8A4UqU5kwEz4P4V3JURUE7o muYA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (6539849cd4073d4412c02dad4d261855)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=Ud1tMldDQbvZ/MUqrNkJCgodhNJO654nmJoSn9CsZQw=&c=jAJXQpmmA6GatOC0pty4AfBYYNa0CzdxcfGm4 zdtriP6B8lkcYe29ueApZ/SjmAVv xAIQNF4Ucf2ml3UMa4rQVRe70vnhulnLkMcHAqPcBtYQ6JZBNC/KeAzFBTP/qGOChXsgqkSq6hgweEZirEw==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe  (04c10b3d52ba8fe3b4f402c5e18265c2)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=K1qH9w2zpdbz7JtvnLd58N/eORabmUTXHmQTYoQCsA4=&c=uR Q0NQ82h6VVShsLJybdmxdJ6AJ17j4L7ZNqZ6/aQTMG1JsFoiNzVqMCE7qop3H9CgQza2APQz9NGfFyGxUSgCGMa3JRiHeLckFwhuVan/CSdRhDr3Lu1/zlMAKpB7j/a5tNWgzTrpYf 2J0oHXNg==&e=0&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe  (212a7cf911ee4daed8326494981a44db)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=OK5fLygqvjnUWPGuiNy0mqrpTU4eXFuPzQ1Q6JwxI o=&c=EfWQA1webfRlMoRwBxN15hQ8PG74GkjtIDL624LJExsnOtv2RM5rb9fNXfD8buSR3G cQN7IOgdn/5aUTymacr q0zsJ39mwExLQGj E44Pol epXbtmfYwlabsLRT5Y2J8iePL0ae7bDF1OH0zxNg==&e=0&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_Office_2010_sciagnij.exe  (a98f7f6cb3cf47aa02176523b5590bc3)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=lk4Oc5DtKF8sPmufBNzFfdIf K5vBXe9s3l5fzwj5hA=&c=XBCaSh4 MOWQ4smwN4DXHceyFOQ2KrY1VD3km7soYXoY0Ol2h1mJI8FBpSjkbeTC4vKE XQTN4PbjlCRCyNXNW5svMrhPPt YoBNfkrjinXvaET5ikpS6mu3FRGfH/mkTYEfYFV8amv/qQ1/vtbSrw==&e=0&fallback_url=http://.../shanghai-mahjong.exe&downloadAs=installer_Shanghai_Mahjong_sciagnij.exe  (878d67e37b0a67ff923ac7b22cd25bac)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=px8gldOWAanhu54RWdld7hN6kRsvcPcrfZZC7zZOjzQ=&c=qGvGunbCV PjTgwlVyXHhc/gcHYWWz4M/27oTwsKIkrrcxcfIOeYQKaNJbmLX5OBEbB5hccUSa7ce xB 7I8NnPd7J3Tw1mUGKZQsuwfAiNVDUkCpbsHeS jCLtOloeP&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_9.0c_sciagnij.exe  (c5b6a61482d8b29695e28755d4d3f64e)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=apostALjjSQsrGE2fh4mW9mlK3I6FiYo2kM v1ERrqE=&c=D/oUNcGvWVqgeo5VunkNjMMtepuH4Xzw/rq6D41xm5xwk3RrNai1FohZG CBp5HKDnux3RN8t4CAM777PhXTJmHJVQfh0mSSXu1jMobvXYWZGc Kebk96tYkAaUcMtfN7YNFDlsKkWlGB0kCDpikxQ==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Excel_sciagnij.exe  (da5ed95ac0b29e9af69ba0728209c2ea)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=1CMVD5R1vyCEGFTLMDlBe5X38/90vn7UsWzjflYpTw8=&c=Bkdy4OajV9eJTHROVAw3Kfi/1XMblviQjz8VEa15NgC3iZrerYfP F24/b9MzzjgUUAZaIHPJogNfCfLHa2KxiACdUH1tvFnJD7v NL3ftGPKF8XiTVyYyjhvoEG02eBcquMZ0QSiFGLMiwJ2mq/jg==&e=0&fallback_url=http://technet.microsoft.com/en-us/.../jj192782&downloadAs=installer_Microsoft_Office_sciagnij.exe  (128129b42c0573bc18e089c43f53030c)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=syfJehxfSZtGUmZjT/FDXqvDwfthizqupoYjoIB/DnU=&c=fWjrW9xDhIXAut3SoSS8c/0DFlZH5i3nmOPM9gxRCIcL9cOYTNCtwx/bGEz3A7plVoyip4LE1lm zN05mXVgSxXj/P5 3XaymdVIa3WvhEjoYCqAUStVsrfYbIhmbjEUC2LhfFbEM1xIKjvbb8elfg==&e=0&fallback_url=http://store.steampowered.com/app/.../&downloadAs=installer_Terraria_sciagnij.exe  ({c44d1815-2bc8-49d3-a5d8-cd260543846a}-installer_terraria_sciagnij.exe)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=S ZA0YBpazfOJ0M9eXCJ0Ku8m OCTaMwjFe7IU/z0lU=&c=wv356Qopwasaf02B5GPb171qUn6rQXX 6yKCIJiWnu2c HkbOQrovvHe5foF0ItjQPr2TPGj dr V7hrj66o2qlwGBCjsMybL4fyMmEmvizASIRcm8jnzdJMmLWZ/WyNSc0aikCzD DzQrVWZ6PXw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (6539849cd4073d4412c02dad4d261855)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=D/8 vRjWw2WPqDpU69/ZwHMwbt3L3u0INve/lWmgcGw=&c=zHYII5Lj04GZ9e3xfCI/T8O4J UZS7I2qYTL07B1DC9lzp2p5N c5/VkzeT99m9wg6vilOKzTvb3wJ6VZOF6unKpaWJ6a G07rI6BsIjqhTOyY SBfuhM3H2NPkR4WtGhkGorTsgx5vGekbMyVbfrA==&e=0&fallback_url=http://bi.sciagnij.pl/.../0/Apache_OpenOffice_4.1.2_Win_x86_install_pl.exe&downloadAs=installer_Apache_OpenOffice_sciagnij.exe  (22f2edae943403232167517e87e9917b)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=hOX/ZqKQ/XWZB0M5GC/L6SxEQtf6tnlFObthjHOJjEo=&c=ySOENWwXLZklk9GbRs9GlRjldvgGwtBQaBjJ/M4ikoQSPw9pfH0duee9Yk74UUPLsF322OOeMbtbfX85nFTf/32q5kfcaqTpkSDvEEZe6WCpJ4Iid16H0wiH51V hDylXytP hmhuQNqyehDE40KAA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (6539849cd4073d4412c02dad4d261855)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=N8jWuIyxVfHjaah H32J/ VOJSW9sbtBAGV3YdxlN4o=&c=HUqyjTAUX0xnMjTwOfCHU3TA59Q4pH Rh3PS4VYD8kQVpKNTgZXw crGFJPbsZ/TpnAaLIt91LVJnHXKKPG1RxV4oGk2hOAahUzz6IbNto5gga RyFLGDWtERyuWC2N4ierp/kNwXY8L03LdivMYGA==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../nostale_setup_Global_0038.zip&downloadAs=installer_Nostale_Client_sciagnij.exe  (7e518967e7c039a151bd3839cb13b2a8)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=3zv VW 0S8DGXH/ZeriOjVZ6XwbyM2lE3Lfjf9tKT3I=&c=z4RV1Y1Sa6ok/oZCNdJdkgp7UezNpoGFbpQ5ufvA8qg/912wnjI2iJssJwJ54oIW3zfkOYyPV5zzxXXXrb/WlzKW5bZ8KkynnXkPcVmvbUEUa4SyDNAtklJEhcfOGuVvWDO73YB008gsBkJlUZILCg==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../310342-instalator_sciagnij.exe&downloadAs=installer_ImTOO_Convert_PowerPoint_sciagnij.exe  (ca6a823c9742e69920643a3f6ef056a2)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=YVm4u2NCE30VxWiY2bqpN5umsBr4jrMeSQaglh/fy5w=&c=/Kpn0WnQNgrYK1ZuvkRtImIZyeUkx9EGhEAuW320gDk 28R81TmfxbGsogyefEWWshS8FaaZYQV/CTz7JKsv7ASEjl9dgWpLHb23j5SyAVuIKnFCTj/PunTJ2BMqpE1NCuqRKGWw2BU4JvnbQLYXFw==&e=0&fallback_url=http://www2.ati.com/drivers/.../amddriverdownload_installer.exe&downloadAs=installer_CCC_-_Catalyst_Control_Center_sciagnij.exe  (bb768151b162e6257a95282f6f80fd54)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=KfLFsbTmmBiXe1uvvoW9MMj/E2IpzTYQpUqrsPfjwvQ=&c=6EZNEvBYtBk3f1OBM41SYhJqm02a6 Rny57r0cilF3lvXxN5O9Kcbx9snsU1vnVXr2hmXyeF2LAbhlFYPFBfjdkwdBVceU7KMcUfzM7CbGGeLyebCWtVfUJcgnmkw4Cqz5FkqFhFcI1qbwgU6k BbQ==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../mp4player.zip&downloadAs=installer_MP4_Player_sciagnij.exe  (3fde5fca44ece8c43cb296dd37d64f59)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=SVEYby5lA2YhHdZ9b/Ad7kYQnEOQFyZ5HTCWDtTPZ5c=&c=Ha3H944307eBzZ41/UsSHif4WAgj54t5qgeKcXLeA6Y296HLOGQZTo3XPLMi5NEF2pHaaWoyPPmJe1cLkFrVzXpAMr5Ceadqm6FePcYkn0qg0ZPIFFmqhIaHaPkEVaV2rJ/mjbRMzmF1kgYwjFtogw==&e=0&fallback_url=http://www.razerzone.com/.../&downloadAs=installer_Game_Booster_sciagnij.exe  (65e53b99112493099293a3ab0e477fc1)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=sHA8x6rSfeTw15OXwVLfj5zJv5p9weZC1vGqF/ELMPw=&c=X9PDTAXT9J10slbi cXIyAdIv/Tx RWkMIq8ZvMQl/u3pxfj3Tyc/Gm1H0/yZnKwHHIzgOWj1xPi9UrVcx3u0QTT2oU7F EObBoDZnzT5pIbmpdy0TwwOiHrwmB3aOmZ/EuFp8l16Iy2Nzmr 263Vw==&e=0&fallback_url=http://bi.sciagnij.pl/0/.../czas_pracy_instalator.exe&downloadAs=installer_Czas_Pracy_-_Ewidencja_sciagnij.exe  (fa84360109c719a0af10b37b5be313c1)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=Mf/vMNG3DrQ3yKbNwiopGim5td0CXktddivWIfcR0ps=&c=/k6GiCuX2XULTLkFFWsB5etYuHbQ xReizpkBrtSJ9PKn6K75gRGWsN1PhCJo1/hrMO6BU 3U/jCIYkqmrBoEW3pHh4iGLaAQ8aLo9exLZwbVkK RZgv2B1ExLSQBKxuT0umEb Pkk0dtnNp4smgmQ==&e=0&fallback_url=http://speedy.sh/.../REAPER-polish.zip&downloadAs=installer_REAPER_spolszczenie_sciagnij.exe  (c0f796aa7ea83303aff22b7bf6d94f96)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=UCj3Q2Wo6/RtM7nR7ce 61uT/pN0iGTRhV2WHszNZSA=&c=SiZ2pfNB3RvOPyPR8BeLBsT 031LsI0JwEUAP83 fB4YnfdAAgsziTB0srEWvWr4Fvci2hBgd5wqLd4KSpnbFPoYfQS5OY4TWI7qp8kK8m9MGYYsPUu900oQ/ocI8dtt3PpF3ZB42gYrluShTwuSXA==&e=0&fallback_url=https://products.office.com/.../try&downloadAs=installer_Microsoft_Office_365_sciagnij.exe  (060ee71100be9aee5670465bd28f8b80)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=SsieJPmy/W tDezgSQ9TPALO68u4yqR6iEmBBXbVm1w=&c=1i6xie4vcSMSfa60nESDTSV2sLnpNY7KWWaUT5bJLkFcl7doCQrE43BoupY9MFFYPEQQJOrQ VFYG 1dIt9hZp f/0HDy/VkYLEpTKnsv5u5bH4WP14Hu1sf XMHIa0k&fallback_url=http://.../download.htm&downloadAs=installer_Total_Commander_sciagnij.exe  (dbd70d5198246fdc6b5126be9da780f5)

1 / 68      (PUP)
http://www.contentdltour.com/c?x=YkEowD /u4CaArMViUhwucmk6Qo5yoS4D nuD40HqIk=&c=n5GgrKWafP3c0psHMtVdArrQoSvm17CM5SrTHNzm5DDcAfjsIgQuJ2NxhJFXYvdajvSjLGS7gkVZLj8C7/DwYruUjjUPxnSk9OIUf28fjVjBWnwKXU DN5Yer239E91bnaLRn9mIhNiwS3yl39Ea6Q==&e=0&fallback_url=http://.../downloads.php?cat_id=1&file_id=241&downloadAs=installer_Velvet_Assassin_spolszczenie_sciagnij.exe  (998f178dceafb6be5dbfc3b3f1b25d25)

The following 36 files have been seen to comunicate with www.contentdltour.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.