installer.manycam.com
Visicom Media Inc.
Domain Information
The domain installer.manycam.com registered by Visicom Media Inc. was initially registered in March of 2006 through DNC HOLDINGS, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Visicom Media Inc.
Registrar:
DNC HOLDINGS, INC.
Server location:
Virginia, United States (US)
Create date:
Wednesday, March 22, 2006
Expires date:
Monday, March 22, 2021
Updated date:
Thursday, June 26, 2014
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.MyStartToolbarInstaller.VisicomMedia.W, PUP.Visicom.VisicomMedia.Installer (M)
100.00%
Malwarebytes
PUP.Optional.MyStartTB.A
71.43%
Dr.Web
Tool.InstallToolbar.129, Adware.Shopper.489, Adware.Toolbar.272
71.43%
ESET NOD32
Win32/Toolbar.Visicom (variant)
71.43%
VIPRE Antivirus
Trojan.Win32.Generic
42.86%
IKARUS anti.virus
PUA.Toolbar.Visicom
28.57%
Fortinet FortiGate
Riskware/Visicom
28.57%
McAfee
Artemis!46AA40E09C71
14.29%
Agnitum Outpost
PUA.Toolbar.Visicom
14.29%
Trend Micro House Call
Suspicious_GEN.F47V1104
14.29%
The domain installer.manycam.com has been seen to resolve to the following 53 IP addresses.
server-52-85-140-201.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-188.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-173.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-135.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-89.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-39.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-220.iad2.r.cloudfront.net
April 12, 2016
server-52-85-140-212.iad2.r.cloudfront.net
April 12, 2016
server-54-192-18-98.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-76.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-33.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-180.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-154.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-145.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-143.iad12.r.cloudfront.net
April 5, 2016
server-54-192-18-104.iad12.r.cloudfront.net
April 5, 2016
server-54-192-195-97.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-75.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-241.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-218.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-169.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-159.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-136.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-98.iad53.r.cloudfront.net
April 5, 2016
server-54-230-193-54.iad53.r.cloudfront.net
February 27, 2016
server-54-230-193-48.iad53.r.cloudfront.net
February 27, 2016
server-54-230-193-175.iad53.r.cloudfront.net
February 27, 2016
server-54-230-193-127.iad53.r.cloudfront.net
February 27, 2016
server-54-230-193-88.iad53.r.cloudfront.net
February 27, 2016
server-54-230-193-67.iad53.r.cloudfront.net
February 27, 2016
Showing 30 of 53 IP Addresses
File downloads found at URLs served by installer.manycam.com.
The following 8 files have been seen to comunicate with installer.manycam.com in live environments.
URL:
http://installer.manycam.com/
Network:
Amazon Cloudfront
SSL certificate subject:
CN=*.manycam.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)15, OU=GT36371141
SSL certificate issuer:
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US
