www.usearchmedia.com

-

Domain Information

The domain www.usearchmedia.com was initially registered in June of 2013 and originally registered through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Monday, June 10, 2013

Expires date:
Friday, June 10, 2016

Updated date:
Tuesday, May 12, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Root domain:

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), Win32.Generic, PUP.Visicom.VisicomM.Installer.Meta (M), PUP.Visicom.VisicomM.Installer (M), PUP.Visicom (M)
86.36%

Trend Micro House Call
Suspicious_GEN.F47V0713, Suspicious_GEN.F47V0129, Suspicious_GEN.F47V0221
6.82%

Kaspersky
not-a-virus:HEUR:WebToolbar.NSIS.Codiby, Trojan.Win32.Swisyn, not-a-virus:WebToolbar.Win32.Agent
6.82%

F-Prot
W32/Kazy.BD.gen, W32/VB.AD.gen
4.55%

ESET NOD32
Win32/VB.OSK trojan, Win32/Chir.B virus
4.55%

Microsoft Security Essentials
Threat.Undefined
4.55%

avast!
Win32:VB-OJQ [Wrm], Win32:Agent-BARL [Trj]
4.55%

Emsisoft Anti-Malware
Trojan.Generic.6753864
2.27%

Dr.Web
Trojan.Siggen6.54687
2.27%

F-Secure
Trojan.Generic.6753864
2.27%

McAfee
Virus.Artemis!B1227836FFC1
2.27%

Norman
Trojan.Generic.6753864
2.27%

VIPRE Antivirus
Threat.219451
2.27%

The domain www.usearchmedia.com has been seen to resolve to the following 27 IP addresses.

ec2-52-7-27-12.compute-1.amazonaws.com
July 24, 2016

ec2-52-73-167-100.compute-1.amazonaws.com
July 21, 2016

ec2-52-70-117-44.compute-1.amazonaws.com
July 19, 2016

ec2-52-87-17-95.compute-1.amazonaws.com
July 12, 2016

ec2-52-7-31-45.compute-1.amazonaws.com
June 19, 2016

ec2-52-72-131-1.compute-1.amazonaws.com
June 18, 2016

ec2-52-3-62-61.compute-1.amazonaws.com
June 6, 2016

ec2-54-88-236-93.compute-1.amazonaws.com
June 2, 2016

ec2-54-173-46-97.compute-1.amazonaws.com
May 28, 2016

ec2-52-7-109-171.compute-1.amazonaws.com
May 26, 2016

ec2-54-86-240-46.compute-1.amazonaws.com
May 20, 2016

ec2-52-202-230-224.compute-1.amazonaws.com
May 20, 2016

ec2-52-201-139-90.compute-1.amazonaws.com
May 16, 2016

ec2-54-165-84-201.compute-1.amazonaws.com
May 14, 2016

ec2-54-88-99-221.compute-1.amazonaws.com
April 21, 2016

ec2-52-86-66-240.compute-1.amazonaws.com
April 21, 2016

ec2-54-174-46-104.compute-1.amazonaws.com
April 4, 2016

ec2-52-86-75-145.compute-1.amazonaws.com
April 4, 2016

ec2-52-20-55-45.compute-1.amazonaws.com
February 26, 2016

ec2-107-23-9-9.compute-1.amazonaws.com
February 26, 2016

ec2-107-23-79-148.compute-1.amazonaws.com
February 20, 2016

ec2-52-72-171-155.compute-1.amazonaws.com
February 12, 2016

ec2-52-2-142-12.compute-1.amazonaws.com
February 11, 2016

ec2-52-20-219-108.compute-1.amazonaws.com
February 1, 2016

ec2-54-86-248-202.compute-1.amazonaws.com
January 27, 2016

ec2-54-164-47-139.compute-1.amazonaws.com
January 27, 2016

February 27, 2014

File downloads found at URLs served by www.usearchmedia.com.

1 / 68      (Adware)
http://www.usearchmedia.com/.../dlsecureTb_1.0.4.1.exe  (c190bfd59f81b0e6460e0e608d30b956)

1 / 68      (Adware)
http://www.usearchmedia.com/.../dlsecureTb_1.0.0.2.exe  (f9df9949632e08571f6bb1b59db1b82d)

1 / 68      (Adware)
http://www.usearchmedia.com/.../z_downloader.exe  (63ff279fa3c6fae4c0d34bb6eda7cd6a)

1 / 68      (Adware)
http://www.usearchmedia.com/.../dlsecureTb_1.0.1.5.exe  (ffdfc553c3e69eef6173561b3bf81f5a)

1 / 68      (Adware)
http://www.usearchmedia.com/.../dlsecureTb_1.0.1.3.exe  (708c7937d7d5d75cf3daa1e6dbd4ee57)

1 / 68      (Adware)
http://www.usearchmedia.com/.../dlsecureTb_1.0.1.2.exe  (ccbfa9c97ff4ffe1c9e77b95e37670ec)

URL:
http://www.usearchmedia.com/

Title:
“#1 Search Engine - usearchmedia”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.10 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Shares:  9

Statistics are for the previous month.