home

www.nowcenterbest.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
nowcenterbest.com

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.MICROMAXSTUDIO.Installer (M)
100.00%

The domain www.nowcenterbest.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 18, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 11, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 11, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 11, 2016

File downloads found at URLs served by www.nowcenterbest.com.

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=UAmPMXDZ fFx9p6O7xClPIEFxA0pIp8Rw/1D/6FIJuE=&c=JpD57fA9VXkml0Q55d4DiFwl/0mt/8Ie/sCDgnFiWuOXrZ0AqX91SVrDDKL8olaefgc69WRui/ODexrglLgeHnCUmuNKAXZpJ8kvwpRwusALEfZipRwnzZVmhV4wSrqn&fallback_url=http://res.hufftos.com/.../Apache_OpenOffice_incubating_3.4.1_Win_x86_install_fr.exe  (fd97125faaa6146aa795e9fa37971efb)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=Wrh ExI/h97qHhxODep 27DwsSYfKSKprtC2XD9qV2E=&c=jzHO7vWFLZyfu2dNpS 2eLHUPcb eBSd8QjSJ61I8bSokOi24jE57REjZu8X/O7yVeonMZrTgCa36qNfKK9ZF/d9yXIRZrM tLxcsvPiybGNICrOTh7v7X2NX6GgEPLI&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (6d3066e145a24eb84a772616129caf9b)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=Y7FLAfCw7yZhkk6ycoAY08dA1MGem DgaJ1e7AGu3hU=&c=XdhC0hgtmMLhAFY2nyB64C2aZSkWKvHAGWd2VnGcGut2Uk2Ue8O0UWAVVQbinGJfCxoAjpMCIFwKVEUNYzfMLdnTU2wE4jD8/ u3YdRSwAQYr ZWeX6/tuzFWw0AWpc &fallback_url=http://res.prograbay.com/.../wlsetup-web_fr.exe  (433241c23b448dfd4bfc4c33eb3319a7)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=mjUaCcBJw60UIeQzHbV0O0eeOtjtqnTT h5uFPh/ZIM=&c=mf8ecUYEfsgY2kFBPOBuEVGIOsgXM49XiWfl1kKhTucJmCCGb/IBkQ2OJpappy9qSXg3UwutYVUmoEtsX7Vr4kBSl9jwlnPJQT7BiU/do8HnT aF2AuC8xI9GZAthnmf&fallback_url=http://res.mshist.com/.../LeagueofLegends_EUW_Installer_9_15_2014.exe  (e74701fc87476d09ea29e6c787dfac94)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=NUj0VE4ldZ3NA2voIZZaqT0DMnf9l jXEG1VhaiaZjk=&c=6ISqhn/MvhilCEjanVKpZ2afDhKJ7vTrj7Sq2byenPU2uFoMdifDUe9TujKiy2MnVqIQFkymtAJvXwmUqr9K3Ahyr6zt6qL3tsI6PAFRXf77BB3adUVAoVOtQ0TwLawg&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (8ef1f66128c856fdfe4eb4ba0d005f39)

0 / 68
http://www.nowcenterbest.com/WVl6OTRQVGRyYVVoeU1rdHdNRGh3T0U1amNXZFVRbmw2Y1dWNmJFMU1ja2wxVVhad09WWmhjV1ExTWtOaVpGRWxNMFFtWXowd1ZWWm5TSEpSTjJseGExQnRiWEpaVEZVbE1rSXdaV1JRY1hSRVYxVjJVVzlyU2tzM2NqaHViV1pTZUdKaE9WQktUM3AyTVhack4zUXpiMk5OTmtocGMxSXlNWEZ5VFdRM1Jtc2xNa1o0Y1hKVGRtdFZja2c1UjJod09HSkpkM0Z5Y0RoRmJrbHdRbm94T1hnMFMyZFVjVUZqZGlVeVJuRjVaMkZNZWxVMFZWaGlNSEo2Y0NabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5KbGN5NXViMkpwYzNSbGVDNWpiMjBsTWtadGIzWnBaVzFoYTJWeUpUSkdkMnh6WlhSMWNDMTNaV0pmWm5JdVpYaGw=  (wlsetup-web_fr.zip)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=uzxVcph9LY/b/IgkGS0YIcNTYAJf2yhB6cp7E TYAfE=&c=dXIncwMBRqKsfKwh6iJ6YBYD3JjnK5wCS1H8ric1pH3vxQ2rFQcSvOL7pBTAzrHHE38gMxG7vOiOpips0PxU2/lqyQzY2DdPk9oGPM/k4CCmRo4VgqBa81zTm1TyWICm&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=kLRGxBPi HUrbqTEi8B3tqBZjddKwqbtvkfKZEV8sLw=&c=KkVnLkmkzPRXdDUgeE9wgPli1NykGSns1mMKzw6Evr5VU0Q9Nb0vOEUkkD6PSANkW7QrWJtBsvxKzm0 vTHvNjLGBf0bMMHqEr5Rvrb9DuCu2V4PBooyiqZiXpxpnrJ4&fallback_url=http://res.prograbay.com/.../wlsetup-web_fr.exe  (d821d5b9676ec2caa8f2877f8d20d4b4)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=3WfMwCN0H/8yhZS9qTFdS 0/Y8IrVDd/hWKVUve/f1o=&c=CpW/r6VZ1tCXSHuCK0vMlIfE9s/af2j5xb5/hHjHCk 7YEtdtBaqDxzAmqP2lma2GNECZ6EIZ B5ODffqDqRd0/clp0TWIIPQcbqduh2wh7LP15N/bVopMZ1tBjm/8DF&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=bpsisnQ4aLGzdwezIF3YKtd Q6IeAEKEYx1hvxXrfY=&c=bMZYueZjxGgo9aUSjQbU39j//Zwv5ndNMTAO1wh1Y lRw7RTZ02awhLTL/vyNfjydNfj3uyW9ADOPOiJxacjZ20ljCKFQp/P2nEBmv 2CN6Kjs9bRBjxPOTPTXpmyhV7&fallback_url=http://res.mshist.com/.../ClashOfClans.exe  (8ef1f66128c856fdfe4eb4ba0d005f39)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=AwnYbIcuzydRoWbBFyYiUYdZHglmRvIkojm1vvPMo7o=&c=mn47FzOY0Q0cT 9S nxfIJhYY39WB3u3lKdffXDZ65ur8gr7Xp/6QlDedpbOBp7x2uKMsnFItsV9XX5h02xnl0/poaCO026YsIAa yjWJG0jvg6gdK8 JnTipWFIjrFx&fallback_url=http://res.hufftos.com/.../FFSetupMultilingual311.exe  (d501b75a6715cc7dc5e355b91795b9ef)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=QCQVSHYyuoL0vIZ/YdhDZNdInkVQVzzCX0oJD5qsmAo=&c=e owp0RFNA75gHKI0JogBUC2BKE3ccGIt0gF6WsndMtXJdXbUXojXhOzzRpybVnwDKTDMyUDHZkshasEQktRiv7LlIQ5c1CqJR4OP2Dk5OyW1OzlgVuSix0CuMyo0y5D&fallback_url=http://res.mshist.com/.../CandyCrushSaga.exe  (47796d8aba98a91ea0c8d04394b83cd8)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=e23Ki2GoFkP0anoFk1eH94owYExMCZL8dyUvYQMz5to=&c=qJLeRo5YefkjDVFWkoXgi37rtNbeyyaEUg0mZad/Ux7HCgslZjNLyFNpgP6lIAm6KDFbx/HLpuD3aI3qmz45PocpNTIap8Ssx5pOB5Qd0tVfdwYywvrD3A4WSL9zC7oW&fallback_url=http://res.hufftos.com/.../ChromeSetup_fr.exe  (8092e80b7335c65ebf2c84914b4e60b3)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x= nk13AsuH2OzXjSU1I975ZUhK80moCGnt5KxYFmtWX0=&c=u1TtlETq9cZikCpx5MKxiEZh5pv81L0yMN4BBGpHtt8sN16Exz Doi 7W8 TK/W9DZ1pn11eGNYPyFTKSb5zS1sIs9Fo4mjF3RGp8EoN98CoU6Vio/v7miL/hmqYXFL7&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=L u2mjsNXCsDIRf8QZzX7HRPMe8TF35OOXe6/tVrt w=&c=/zKy6qy6TZN1KBW t40veKeZROb5JitRAS3RXRvX9xS18QyqKixdJO QNvsIr7g6yDSI/QEN8i7O1WLZ8oGRoNtSMKJcNmgnXGFMDUODQdqHoR6uSVNxkw/rXwfYp2Y9&fallback_url=http://res.hufftos.com/.../Firefox_Setup_21.0_fr.exe  (icreinstall_firefox_setup_21.0_fr.exe)

1 / 68      (PUP)
http://www.nowcenterbest.com/c?x=UkQWHSvhBl7MfcPlEwr0rgbc6f6kkG3Au4pM1xDOu8Y=&c=ZeJmzODN2ilXlpZXaMvv6CTmy/Xyvo3piHXFsQImBQbSUM1EFHs50nGGIzqPJACCyGVkH fBHG5t5sZ3eQyJ/KI0Nd00YwTY1v/ZuSGCq yZKUMUOLU/A1Ps2nIAZkfa&fallback_url=http://res.nobistex.com/cache/upch/.../UpdateChecker.exe  (1d7838593bf47b8470d701fc793994de)

0 / 68
http://www.nowcenterbest.com/WVl6OTRQVE4wYUdRNFJXaFJTR2w1VFZRelpUVmhUVGRaWVdFME1VWkdZaklsTWtKV1Ftc3hWRzhsTWtKRlIwVTFKVEpHZW1jbE0wUW1ZejEzVURrbE1rSTRkM3ByZVVSMmJVcElTekJqWTNGb1ZFVjZaa2QyTnpaWmRscFdiMnh1VURNME1XZDVPR2RVV0U0MldTVXlRbUkwVWtWNlJYQTNiR1ZyTVNVeVFtZzFSVzFSTTJaQlprVk5lbUpTTW5oQlVEZ3plbXBOU1hOR1IzaDBZVmxGYldOSFRWUkhKVEpHU3lVeVJrNVJjVmRrYVhaVEpUSkNZblo0Y0hKNk5GVm1iemRDVGpGRGJpWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpRU1V5UmlVeVJuSmxjeTVvZFdabWRHOXpMbU52YlNVeVJtRmtZbXh2WTJzbE1rWkJaRUpzYjJOclVISnZMbVY0WlE9PQ==  (adblockpro.zip)

The following 6 files have been seen to comunicate with www.nowcenterbest.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.