home

a.content-word.work

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
content-word.work

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.PCUtilities.Task.Meta (M), Threat.Win.Reputation.IMP
100.00%

VIPRE Antivirus
Threat.4732184
22.22%

Dr.Web
Win32.Siggen.7, Trojan.DownLoader13.57375
22.22%

Microsoft Security Essentials
Threat.Undefined
22.22%

McAfee
Virus.W32/Virut.n.gen, Multiplug-FAD
22.22%

Lavasoft Ad-Aware
Gen:Variant.Adware.MPLug.35
11.11%

Emsisoft Anti-Malware
Gen:Variant.Adware.MPLug.35
11.11%

ESET NOD32
Win32/Adware.MultiPlug.LL application
11.11%

F-Secure
Gen:Variant.Adware.MPLug
11.11%

Norman
Gen:Variant.Adware.MPLug.35
11.11%

MicroWorld eScan
Gen:Variant.Adware.MPLug.35
11.11%

Malwarebytes
PUP.Optional.Multiplug
11.11%

K7 AntiVirus
Unwanted-Program
11.11%

Arcabit
Trojan.Adware.MPLug.35
11.11%

NANO AntiVirus
Trojan.Win32.Agent.dtcxml
11.11%

The domain a.content-word.work has been seen to resolve to the following 5 IP addresses.

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
July 7, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
July 7, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
July 7, 2015

52.27.23.115
ec2-52-27-23-115.us-west-2.compute.amazonaws.com
July 1, 2015

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
July 1, 2015

File downloads found at URLs served by a.content-word.work.

1 / 68      (Malware)
http://a.content-word.work/hp/?q=saUxCFaBOc9Kkg0123C22MAuV5tc/GGQkJsogXpy4WJEaBOEggCk49EawhCBPIaRDTCJbTuSBWbHBKU eGXULdfOtKhobtjzQ2I RHSQvmVM4o1QooyjxyGP1Gjx1tHn8afl/DUV1r7T6jC/FlGibjFM6U5g0ZE8tCNpwlGCGDkzpFLVivxIIi70jTABOJ/5h/aZ89KCrLTQgk0LinKjhDmBBVtnLChemELOxxVr4j54hUa23P 2YzgkqowtmrQqyktv0oVf5ko7wj7KrRM5rkiiMXGyEr8M26lWlV5XOE80vrvyd5aAHoJ1oDH23JsxiNf2/wGZQkehfgxY3adGV6wbCWZaSCPXbdkjEirSqIaSdkn767ZNOoexTX2TGxmhgKgJIdYo9FVi79S7DTq8Pw6Zmx51AzkK2FBtjJgtUH7YA9oA7 4OtLZs7ox0PTGFt02LmLlgEDPlG6/of3CnmM127OdqXEvnhsvNW7eTfQn2LM37iBpuG6OD8fICfE0Z7XaBrkJlH5O04mmiyLPB5tb33SJpmvY/VO9k2wmOxsVxhMaQKIWfBg5WMfR2fuq7IuGJw1w74x37h41wM6w0quT8fThrqb/aUcoAHDf311kWPjl6N6LJCfeoV2Zvvb88WR/.../WjjicQ  (download.exe)

1 / 68      (Malware)
http://a.content-word.work/hp/?q=68EmlYk2Ei8lOabcde/m32RVmOv9hnQ/gdQGxvRWCMNlgbdiHNDJSfQ8pFT17zZ876878sYsegEz2lQ95VRfKVe2tj75D6g9APTyksgfghkAbRGS0qx3N5L43xctcVFbrx9ZEpIEbkA1nnrs87Xn0NoYA3drcjvfg0poYFARSySzZzaWiBDER7Xdha0LdXw8sxuaH3p7sdiqcY5ItEovvv7v8w6wUNpA2Wak1XFkX9BIv0lmCKdsvuFzaPNFdaapue3gbgJ8SppnbieBRdi6ZK1djbaJMgv00derxQMgNGCY1mW0u2/.../VAF  (pc_ half-life 2_ black mesa.exe)

1 / 68      (Malware)
http://a.content-word.work/hp/?q=dSVyu 67TwfQ xztvq0RY/IhmskwdsMquTCsk9wijqO8isQGXobP1LrN8phJkOlf7zdmMxZE0o6ZaSxJpIoG uQt4okCTdujBOtS6/.../j3RAwMzH4YysmFaWjnMVnksvWprVX94jxaG  (download.exe)

1 / 68      (Malware)
http://a.content-word.work/hp/.../TB5 x2G85ijeYNpvpedfX886e1PpjP8nk80 E1mu5vXujlwbYOf8ZWa6GSV9 STZrTo  (download.exe)

1 / 68      (Malware)
http://a.content-word.work/hp/?q=DgPuplWJpxxUhEG xziX36TAglMJGv/kQGRO6tG2Bu4HiAk/b5MVc gFYKzNpeLMhZvg8vJ6ELm63jXmGHyLnVq/.../p58Q9TeIWm9htz ZVC1DBP  (download.exe)

1 / 68      (Malware)
http://a.content-word.work/hp/?q=PDg8/vztP0PoBIKEG plz8RlovdXnK0Xm1E37fklYSztiodBwZev2ZtpN4OPBhDQgQPWVbviGowKJf51CViitCoQPxZJ/IbIZxjBE93nMyLE1rVHu9T68 DA F 3/yoi AJwqUGjJrrRbLGud77x3u4NFYyrjiGaajhdFz812C1qq9hNEUKxpGiIPYTovZpmmdhPTYOUoTYzyM2UUhsU9/Itsv3IsLesSe3D/.../aW9p9eB8iQ2townLZiGwffr4Naqf  (ddr-professional-recovery 4.0.1.6 crack.exe)

1 / 68      (Malware)
http://a.content-word.work/hp/?q=ifr3HAWIzVIHYtvqom2SAmaiKzZ52lOQUqg/NUU1ynxkFCAfJ/FPJGvn38g7lxCiRcFY uIaRGldw2/TuNVPc4OGKh1Sa7SvQwEL7QhDVwNFWeZy1X9f/I2dDXaRL P3TVPBbqtmWci4ZfD0tFTy7a0Z8MMgIHe3I7BoOkF95xS1qYYxDHp7pEdChWjEvSosMM93TMt/awOEyM6IQueD9DlCQbpIox74OBoIX7okCvALnfCSzO63y7IdiGAv2QPt/.../mWcfXz6IDlfgxSBV2ZgWodnBjXJhE7uOz6Bok3u7bUCJVpuadBh7UX2SD5bRU0H0RRv  (ddr-professional-recovery 4.0.1.6 crack.exe)

23 / 68    (PUP)
http://a.content-word.work/hp/?q=GfWEf7TFyogXIWYSUMFtQnxAzHEUBtbUzHfJvaiboQ02cQbZD/LjKnGORMofEGEzeRhtDob5aAY2qJJKeFI2X4iuSgJqw/8AVWFd98g68jv8DG5cSR1u2 jv/ElWLffdvz6ZxLmtfJ04jZDv979xjojXXCMK5U20m7YzEyOg8yhdpPkOb4fbV2RGe4f1A0Yp7RIjpjcOeTXyWbaBGUzRnX3gc GQSldyAVpNcdqdKmPlgMkaEkpklAZ3B4 1uW4SyG8aK145hMZPi7QRp/.../GfgR3VUuG Mwla  (roy chittiyaan kalaiyaan.exe)

5 / 68      (PUP)
http://a.content-word.work/hp/?q=hfVyuH4SFPf3WdefABTX2Ibgqjqj6/OB6HtxNYquznMlGUGeIHYjrvhMJd86pBUWaPgeNcmYZpOv4qOU 9XuH7wcSBpGMBQY9lsxlziaMBT1Qbo//1SuMjtu2QUYiWNz8mGQynSEDmwKlnzBuhynTfg5AJWM2nVGcHkqiwPY BjY4vn9xL7HGcsycET75bFXBK8xm gvUB2JtbUJ093g8hQZRdQUl9Dl6RpZVjd460tMySPH 4UtZReN/GmxpHF1XXK1fXSgXglPw/YfqbVqPlvV7Vv/jkfqr0CElxQ ry7367CtZDpBKV9tLKbE7TtF5n28Xb2CvcjdeBwYerKlziaSfhvzMfWfU9w16dhkS2A iUICzqSphShFTF5HMinqYjOoiHpdeqFu/I12LJnq937ZmDNduU5gBSaLTK0yWisO1YxtW27BpCOCnJc3YrmmynFfThs4mptUcKXe8B31mB8S/.../8SyVdL1KOT EfJY91K810rkpXVQ5Cr1JyicyJPVMtTvSN2EMhu  (daawat-e-ishq 2014 hindi 720p dvdrip x264 aac hon3y.exe)

The following 2 files have been seen to comunicate with a.content-word.work in live environments.

TCP » 52.11.167.137:80
download.exe

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.