home

cdn.vipbundlecities.com

Domain Information

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
vipbundlecities.com

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC.Installer (M), PUP.InstallCore.FC (M)
100.00%

The domain cdn.vipbundlecities.com has been seen to resolve to the following IP address.

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
June 8, 2016

File downloads found at URLs served by cdn.vipbundlecities.com.

1 / 68      (Adware)
http://cdn.vipbundlecities.com/c?x=F/4vstJBKVHQajrVCBeWPqIOywuo82aJI23P5J/BxJ8=&c=iAjVV7k9TRJwomaaM8j90gd3X96azbzIAP1kpsMrRGo 4bxo2gkmLPgYHkgHQxeQA8XM337sNGAJLkP7KCQwYQ==&fallback_url=http://get.videolan.org/vlc/2.2.1/.../vlc-2.2.1-win32.exe&downloadAs=vlc-media-player-32-bits.exe  (70b8b6c84ccefeca693ff00c41338c76)

0 / 68
http://cdn.vipbundlecities.com/c?x=hjpUXKp6hyOfwRS aT3ptMtsuNfQNbkF3q3UCh7TpjM=&c=PeWOpvvOBtJnPDw4JUdmoetzVRbHPGOVKykEb cdJ sVASCK0GBVygPQsMNMhvyQzqS3ZcD4tzD4GPSM1B A3w==&fallback_url=http://www.xinputer.com/.../MotioninJoy_060005_x86_signed.zip&downloadAs=motioninjoy-32-bits.exe  (motioninjoy_060005_x86_signed.exe)

1 / 68      (Adware)
http://cdn.vipbundlecities.com/c?x=i9xeVH/RSpeY/OlTwh3pW69yKgNkjw53qKMSJ3D 64k=&c=AhSR4XfF7sBs6jtWTdSGvpXJfD02SOacMHmb7c46cDZA9eV42 Yv hporSwRE/4G9MWEX0c7IO51w3dn/QErjQ==&fallback_url=http://download.microsoft.com/download/9/9/1/.../PowerPointViewer.exe&downloadAs=microsoft-powerpoint-viewer-2010-32-bits.exe  (ec43cca40663e6a25a3054be4195941b)

The following 215 files have been seen to comunicate with cdn.vipbundlecities.com in live environments.

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
g.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 219 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.