inst.vertitechnologygroup.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain inst.vertitechnologygroup.com is registered by proxy through Network Solutions, LLC and was originally registered in October of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
Network Solutions, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, October 10, 2011

Expires date:
Tuesday, October 10, 2017

Updated date:
Tuesday, January 07, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.VertiTechnologyGroup.Y, PUP.VertiTechnologyGroup.g, PUP.VertiTechnologyGroup.d, PUP.VertiTechnologyGroup.BB, PUP.VertiTechnologyGroup.I, PUP.Linkular.Company.Installer (M), PUP.Verti.VertiTec.Bundler (M)
100.00%

VIPRE Antivirus
Rocketfuel Installer
90.91%

ESET NOD32
Win32/Verti (variant)
87.88%

avast!
Win32:Adware-BGF [PUP], Win32:PUP-gen [PUP]
81.82%

Malwarebytes
PUP.Optional.RocketFuel.A, PUP.Optional.Verti
60.61%

Trend Micro House Call
TROJ_GEN.F47V1210, TROJ_GEN.F47V1211, ADW_VERTI, TROJ_GEN.F47V0111, TROJ_GEN.F47V1214, TROJ_GEN.F47V1230, TROJ_GEN.F47V1121
30.30%

Fortinet FortiGate
Adware/Verti, PossibleThreat.SB!tr.dldr, Adware/InstallCore
30.30%

McAfee
Artemis!C3AA6D895EBE, Artemis!47DECCF6F4E8, Artemis!3B2DD686F757, Artemis!F4320B4965F8, Artemis!1D07906FC434, Artemis!13093FD4090C
30.30%

McAfee Web Gateway
Artemis!C3AA6D895EBE, Artemis!47DECCF6F4E8, Artemis!3B2DD686F757, Artemis!F4320B4965F8, Artemis!1D07906FC434, Artemis!13093FD4090C
30.30%

Dr.Web
Adware.Downware.1714, Adware.Downware.2070
27.27%

herdProtect (fuzzy)
a variant of ecad31ab737499b60c7c2db98bcfab49fb908e8a, a variant of 4731704b8717918dea80ad6d410af3b9ab6021d8, a variant of a1fa43d9d3c98c592b1e69a786466c47e8d77b46
21.21%

Bkav FE
W32.Clod11b.Trojan, W32.Clodf37.Trojan, W32.Clodbf7.Trojan, W32.Clod628.Trojan, W32.Cloded1.Trojan, W32.Clodbe9.Trojan, W32.Clod524.Trojan
21.21%

Kingsoft AntiVirus
Win32.Troj.Verti.a.(kcloud), Win32.Troj.Generic.a.(kcloud)
21.21%

Agnitum Outpost
Adware.Verti, Riskware.Agent
21.21%

K7 Gateway Antivirus
Unwanted-Program , Trojan
18.18%

The domain inst.vertitechnologygroup.com has been seen to resolve to the following 8 IP addresses.

ec2-52-1-175-151.compute-1.amazonaws.com
May 3, 2015

ec2-52-0-164-105.compute-1.amazonaws.com
May 3, 2015

ec2-54-236-77-150.compute-1.amazonaws.com
June 9, 2014

ec2-54-236-175-104.compute-1.amazonaws.com
February 3, 2014

ec2-54-236-109-36.compute-1.amazonaws.com
January 25, 2014

ec2-54-209-99-6.compute-1.amazonaws.com
January 8, 2014

ec2-107-23-246-214.compute-1.amazonaws.com
December 22, 2013

July 23, 2013

File downloads found at URLs served by inst.vertitechnologygroup.com.

12 / 68    (Adware)

23 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/45/14505/45/.../  (tinymediaplayer_rocketfuelinstaller.exe)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/14404/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/209/42/.../  (MediaPlayerClassic_RocketFuelInstaller.exe)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/2202/42/.../  (MediaPlayerClassic_RocketFuelInstaller.exe)

1 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/60/3497/409/.../  (roboform_rocketfuelinstaller.exe)

1 / 68      (Adware)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/45/16074/5793/.../  (tinymediaplayer_rocketfuelinstaller.exe)

5 / 68      (Adware)

4 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/14409/2126/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/2202/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

24 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/42/14403/5552/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/68/14449/946/.../  (qbittorrent_rocketfuelinstaller.exe)

19 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/29/14366/414/.../  (blinkxbeat_rocketfuelinstaller.exe)

23 / 68    (Adware)

6 / 68      (Adware)

23 / 68    (Adware)

7 / 68      (Adware)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/14407/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

4 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/88/2891/969/.../  (pagealicious_rocketfuelinstaller.exe)

14 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/43/19984/43/.../  (pdfcreator_rocketfuelinstaller.exe)

13 / 68    (Adware)

12 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/42/14404/398/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

13 / 68    (Adware)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/14404/42/.../?s1=16160  (mediaplayerclassic_rocketfuelinstaller.exe)

4 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/45/516/45/.../  (tinymediaplayer_rocketfuelinstaller.exe)

7 / 68      (Adware)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/628/5552/.../  (MediaPlayerClassic_RocketFuelInstaller.exe)

 
Latest 30 of 787 download URLs

The following 11 files have been seen to comunicate with inst.vertitechnologygroup.com in live environments.

URL:
http://inst.vertitechnologygroup.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.15 (PHP/5.3.3)