home

skipperham.info

N/A

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:
2 skipperham.info records

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.OlehAleksyuk (M), PUP.EdwardKosar (M), PUP.EdwardKo (M), PUP.OlehAlek (M), PUP.WebPick.StepanRy (M), PUP.WebPick.AlexeyKu (M), PUP (M), PUP.WebPick (M)
85.42%

avast!
Win32:FakeDownload-G [PUP], Win32:MultiPlug-QV [PUP], Win32:Agent-AYLT [PUP], Win32:FakeDownload-E [PUP]
16.67%

AVG
Adware Generic6.LWZ, Adware Generic6.EDH, Adware Generic6.DVN, Adware Generic6.LWU, Adware Generic6.EZT, Adware Generic6.DNS
14.58%

Dr.Web
Trojan.DownLoader12.33043, Trojan.Crossrider.36840, Trojan.Crossrider.52254, Trojan.Crossrider.53059
12.50%

ESET NOD32
Win32/Adware.MultiPlug.EP application, Win32/Adware.MultiPlug.ED application
12.50%

McAfee
Program.MultiPlug-FVH, Program.MultiPlug-FTG
10.42%

Emsisoft Anti-Malware
Gen:Variant.Downloader.188, Gen:Variant.Adware.Mplug.21
8.33%

Norman
Gen:Variant.Downloader.188, Gen:Variant.Adware.Mplug.21
6.25%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.MultiPlug, not-a-virus:AdWare.Win32.MultiPlug
6.25%

Microsoft Security Essentials
Threat.Undefined
6.25%

F-Secure
Variant.Downloader.188, Variant.Adware.Mplug
4.17%

Sophos
PUA 'MultiPlug' (of type Adware)
4.17%

Clam AntiVirus
Win.Adware.Multiplug-55171
2.08%

Lavasoft Ad-Aware
Gen:Variant.Downloader.188
2.08%

The domain skipperham.info has been seen to resolve to the following 9 IP addresses.

209.99.40.226
209-99-40-226.fwd.datafoundry.com
December 16, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
August 11, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
August 11, 2015

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
August 11, 2015

52.26.142.209
ec2-52-26-142-209.us-west-2.compute.amazonaws.com
July 1, 2015

52.11.167.137
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
July 1, 2015

54.149.241.47
ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 4, 2015

54.69.228.231
ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 4, 2015

54.148.67.213
ec2-54-148-67-213.us-west-2.compute.amazonaws.com
January 11, 2015

File downloads found at URLs served by skipperham.info.

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Pass a Soccer Ball ????? ????? ????? ????? ?? ??? ?????.mp4&filesize=1mb&product_title=Pass a Soccer Ball ????? ????? ????? ????? ?? ??? ?????.mp4&installer_file_name=Pass a Soccer Ball ????? ????? ????? ????? ?? ??? ?????.mp4&product_file_name=Pass a Soccer Ball ????? ????? ????? ????? ?? ??? ?????.mp4&product_download_url=https://r9---sn-p5qlsnez.googlevideo.com/.../mp4&requiressl=yes&upn=n1JIAmJ-bEA&mm=31&ipbits=0&ratebypass=yes&mt=1420898799&mv=m&pcm2=no&ms=au&fexp=900718,904848,913444,927622,932404,934952,934953,934954,935024,937426,941004,943917,947209,947218,947225,948124,948207,952302,952605,952901,955301,957103,957105,957201,959701&expire=1420920486&sver=3&ip=2001:41d0:2:40c5:a40e:cac9:b5e5:7a5b&key=yt5&initcwndbps=601250&nh=IgpwcjAzLmlhZDA3KgkxMjcuMC4wLjE&source=youtube&dur=66.618&signature=32AF4B80798B32103F78DCDAC521F324EDB25B8A.DEFD0179686E95EAE94929C1459F8E3AF462552E&itag=22&id=o-ABIFSFI1dzX6ca  ({blocked}.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Metodología de las 9 S.mp4&filesize=1mb&product_title=Metodología de las 9 S.mp4&installer_file_name=Metodología de las 9 S.mp4&product_file_name=Metodología de las 9 S.mp4&product_download_url=http://srv45.clipconverter.cc/download/vJTGnH2YtWawZG1tnZqacGtp5KWmqW1t4pSXamtln2ptY2m0qc/.../Metodología de las 9 S.mp4  (metodologa de las 9 s.mp4.exe)

0 / 68
http://skipperham.info/v2921?self_redirect=0&product_name=Dragon Ball Z Movie 7 Super Android 13 full movie.mp4&filesize=1mb&product_title=Dragon Ball Z Movie 7 Super Android 13 full movie.mp4&installer_file_name=Dragon Ball Z Movie 7 Super Android 13 full movie.mp4&product_file_name=Dragon Ball Z Movie 7 Super Android 13 full movie.mp4&product_download_url=http://srv67.clipconverter.cc/download/qsbCl4ZnuHiwZGtwnJWUbmlh5KWmqW9v4pSXamlhmmloZWq0qc/.../Dragon Ball Z Movie 7 Super Android 13 full movie.mp4  (dragon ball z movie 7 super android 13 full movie.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Inclined plane - Uniformly varying motion: Acceleration.mp4&filesize=1mb&product_title=Inclined plane - Uniformly varying motion: Acceleration.mp4&installer_file_name=Inclined plane - Uniformly varying motion: Acceleration.mp4&product_file_name=Inclined plane - Uniformly varying motion: Acceleration.mp4&product_download_url=https://r20---sn-p5qlsned.googlevideo.com/.../mp4&key=yt5&nh=IgpwcjAzLmlhZDA3KgkxMjcuMC4wLjE&initcwndbps=662500&requiressl=yes&signature=5B2C4BEC8EAB19E51CC8DE9967DDD888D7A0ADDB.6D9AA5F7AE97CAF1AAF7F5088BE8168634F93E75&ratebypass=yes&fexp=900242,900718,904843,924637,927622,930821,932404,939945,939981,9405456,941004,943917,947209,947218,947225,948124,952302,952605,952901,955301,957103,957105,957201,959701&ms=au&mt=1421178331&mv=m&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,nh,ratebypass,requiressl,source,upn,expire&ip=2001:41d0:2:e851:d285:5865:3179:5f0e&id=o-AHydoHVWtE3dLm3Q8u  (inclined plane - uniformly varying motion_ acceleration.mp4.exe)

0 / 68
http://skipperham.info/v2921?self_redirect=0&product_name=HUMSHAKALS 2014 Full Movie Part 1.mp4&filesize=1mb&product_title=HUMSHAKALS 2014 Full Movie Part 1.mp4&installer_file_name=HUMSHAKALS 2014 Full Movie Part 1.mp4&product_file_name=HUMSHAKALS 2014 Full Movie Part 1.mp4&product_download_url=http://srv73.clipconverter.cc/download/tLWorqSauXmwZGxumpWVbnFi5KWmqXBr4pSXaXJgmWJpZ2q0qc/.../HUMSHAKALS 2014 Full Movie Part 1.mp4  (humshakals 2014 full movie part 1.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Mark Ronson - Uptown Funk ft. Bruno Mars.mp3&filesize=1mb&product_title=Mark Ronson - Uptown Funk ft. Bruno Mars.mp3&installer_file_name=Mark Ronson - Uptown Funk ft. Bruno Mars.mp3&product_file_name=Mark Ronson - Uptown Funk ft. Bruno Mars.mp3&product_download_url=http://srv63.clipconverter.cc/download/.../Mark Ronson - Uptown Funk ft. Bruno Mars.mp3  (mark ronson - uptown funk ft. bruno mars.mp3.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Cody & Bailey (Cailey) // Open Eyes.mp4&filesize=1mb&product_title=Cody & Bailey (Cailey) // Open Eyes.mp4&installer_file_name=Cody & Bailey (Cailey) // Open Eyes.mp4&product_file_name=Cody & Bailey (Cailey) // Open Eyes.mp4&product_download_url=http://srv44.clipconverter.cc/download/y5CTq42ju3mwaWxpn5WZbGqs26SqZ220l5eVaW5jnWloabV70szTe6ie3pemp56q/Cody & Bailey (Cailey) // Open Eyes.mp4  (cody.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Ariana Grande, The Weeknd - Love Me Harder.mp4&filesize=1mb&product_title=Ariana Grande, The Weeknd - Love Me Harder.mp4&installer_file_name=Ariana Grande, The Weeknd - Love Me Harder.mp4&product_file_name=Ariana Grande, The Weeknd - Love Me Harder.mp4&product_download_url=http://srv69.clipconverter.cc/download/ys 1iIh13XawZGxonZiVbG1p5KWmqW9x4pSXamphoWlqa3G0qc/.../Ariana Grande, The Weeknd - Love Me Harder.mp4  (ariana grande, the weeknd - love me harder.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Air - Playground Love.mp3&filesize=1mb&product_title=Air - Playground Love.mp3&installer_file_name=Air - Playground Love.mp3&product_file_name=Air - Playground Love.mp3&product_download_url=http://srv75.clipconverter.cc/download/.../Air - Playground Love.mp3  (air - playground love.mp3.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Michael Palin in Machu Picchu - BBC.mp4&filesize=1mb&product_title=Michael Palin in Machu Picchu - BBC.mp4&installer_file_name=Michael Palin in Machu Picchu - BBC.mp4&product_file_name=Michael Palin in Machu Picchu - BBC.mp4&product_download_url=https://r3---sn-p5qlsnsd.googlevideo.com/.../mp4&upn=SGbGAdut43I&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,nh,ratebypass,requiressl,source,upn,expire&signature=D66DC8B25FD3906B434FB3B7EB871C2B3D1B68E0.E6739E0B7C5971CB58CE168E29F9C2BFC65DB323&fexp=900718,904843,927622,932404,934947,9405712,9406177,941004,943917,947209,947218,947225,948124,952302,952605,952901,955301,957103,957105,957201,958601,959701&initcwndbps=546250&source=youtube&ratebypass=yes&nh=IgpwcjAzLmlhZDA3KgkxMjcuMC4wLjE&requiressl=yes&mm=31&ipbits=0&mt=1421250902&mv=m&ms=au&e  (michael palin in machu picchu - bbc.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Concert St jo.mp4&filesize=1mb&product_title=Concert St jo.mp4&installer_file_name=Concert St jo.mp4&product_file_name=Concert St jo.mp4&product_download_url=https://r12---sn-5hn7snlz.googlevideo.com/.../mp4&id=o-AOa359aWfUBkr5fD4kVpF-DNsWZF9J9IIC1ShQHbK0TR&mv=m&mt=1422536332&ms=au&requiressl=yes&ip=2001:41d0:8:6ede:671f:408a:510f:7f00&&title=Concert St jo  (concert st jo.mp4.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Mix Cumbia Chilena By Dj Incognito.mp3&filesize=1mb&product_title=Mix Cumbia Chilena By Dj Incognito.mp3&installer_file_name=Mix Cumbia Chilena By Dj Incognito.mp3&product_file_name=Mix Cumbia Chilena By Dj Incognito.mp3&product_download_url=http://srv57.clipconverter.cc/download/.../Mix Cumbia Chilena By Dj Incognito.mp3  (mix cumbia chilena by dj incognito.mp3.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=MVI 2519.avi&filesize=1mb&product_title=MVI 2519.avi&installer_file_name=MVI 2519.avi&product_file_name=MVI 2519.avi&product_download_url=http://srv35.clipconverter.cc/download/s5OuhpOWx5ywZG1qmJuUbXJn5KWmqWxt4pSXamlpmWttZnG0qc/.../MVI 2519.avi  (mvi 2519.avi.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Gloria Estefan - Conga (lyrics).mp3&filesize=1mb&product_title=Gloria Estefan - Conga (lyrics).mp3&installer_file_name=Gloria Estefan - Conga (lyrics).mp3&product_file_name=Gloria Estefan - Conga (lyrics).mp3&product_download_url=http://srv48.clipconverter.cc/download/.../Gloria Estefan - Conga (lyrics).mp3  (gloria estefan - conga (lyrics).mp3.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Vladi Markov Mix #.mp4&filesize=1mb&product_title=Vladi Markov Mix #.mp4&installer_file_name=Vladi Markov Mix #.mp4&product_file_name=Vladi Markov Mix #.mp4&product_download_url=https://r7---sn-p5qlsnss.googlevideo.com/.../mp4&id=o-AHTZI3KJRrXRA_ETORFmRC43Uqm-4CFN2aJDHdAGESP8&dur=2158.643&mt=1420904468&itag=22&requiressl=yes&ms=au&ip=2001:41d0:2:e880:4f60:b644:6464:88e5&mm=31&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,nh,ratebypass,requiressl,source,upn,expire&key=yt5&sver=3&expire=1420926131&initcwndbps=615000&mv=m&upn=1BEN8UuNTgY&ratebypass=yes&nh=IgpwcjAzLmlhZDA3KgkxMjcuMC4wLjE&source=youtube&signature=F8C8089EB43C8AE5CE9A687136B87C9BAD17F657.010168062023CAC506F7CA97AFD3543831C246E3&fexp=900718,927622,932404,9405468,941004,943917,947209,947218,947225,948124,949429,952302,952605,952901,955301,957103,957105,957201,959701&ipbits=0&&title=Vladi Markov Mix #  (clipconverter.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=hh.mp4&filesize=1mb&product_title=hh.mp4&installer_file_name=hh.mp4&product_file_name=hh.mp4&product_download_url=http://.../videoplayback?ms=au&cwbl=yes&source=youtube&mv=m&dur=10860.553&itag=22&key=yt5&ip=2001:41d0:b:446:abad:bdf2:63f1:f77b&cwbf=0.5&upn=JnrdLEWUJxs&id=o-ANUZO5Hrz6zyxaKL7iDZruXLderrxtssl8uurAG8V2H4&expire=1418953081&mm=31&mt=1418931462&ratebypass=yes&fexp=900718,904729,913430,924226,927622,932404,943917,944911,947209,947218,948124,952302,952605,952901,955301,957103,957105,957201,958501&sver=3&sparams=cwbf,cwbl,dur,id,initcwndbps,ip,ipbits,itag,mm,ms,mv,ratebypass,source,upn,expire&signature=8C22A02B43D18B645A9691BBAC19405B87A427F5.30E9F57027AF2AF43B3B2DD32F08865B3AD792F3&initcwndbps=3031250&ipbits=0&&title=hh  (hh.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Introduzione per video matrimoniali e/o altro.mp4&filesize=1mb&product_title=Introduzione per video matrimoniali e/o altro.mp4&installer_file_name=Introduzione per video matrimoniali e/o altro.mp4&product_file_name=Introduzione per video matrimoniali e/o altro.mp4&product_download_url=https://r9---sn-25ge7n7z.googlevideo.com/.../mp4&ip=2001:41d0:1:682d:5e78:ba4f:3a99:1cd6&requiressl=yes&mm=31&source=youtube&dur=68.963&itag=22&signature=2BC48038A4D9B881F1CBD95AAC43ED57C096AE2E.7389FE5C0BC5C350E59F285737676DEC931278F6&fexp=900220,900718,912334,927622,932404,937235,9400648,940642,943917,945125,947209,947218,948124,949006,952302,952605,952901,955301,957103,957105,957201&key=yt5&upn=6fBmfpBUKr4&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,ratebypass,requiressl,source,upn,expire&rateby  (introduzione per video matrimoniali e_o altro.mp4.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Warka : pâte filo fait maison / Moroccan homemade phyllo dough / ????? ???? ?????? ??????.mp4&filesize=1mb&product_title=Warka : pâte filo fait maison / Moroccan homemade phyllo dough / ????? ???? ?????? ??????.mp4&installer_file_name=Warka : pâte filo fait maison / Moroccan homemade phyllo dough / ????? ???? ?????? ??????.mp4&product_file_name=Warka : pâte filo fait maison / Moroccan homemade phyllo dough / ????? ???? ?????? ??????.mp4&product_download_url=https://r16---sn-25ge7n7e.googlevideo.com/.../mp4&requiressl=yes&key=yt5&mm=31&ratebypass=yes&mt=1420796822&mv=m&ms=au&source=youtube&dur=261.619&expire=1420818453&sver=3&ip=2001:41d0:1:610b:16cb:1b30:7c86:d384&signature=A312DA4B39EC6CBA5B687F3CCD27205A57DB87D1.A8419E293DE89A007C3588569B814BBDBA3A5E9C&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,ratebypass,requiressl,source,upn,expire&fexp=900225,900718,904849,927622,932404,933231,937517,940616  (warka _ pte filo fait maison _ moroccan homemade phyllo dough _ .mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=""ATMOSFERA HUMO/ATMOSPHERE SMOKE""-PACK AFTER EFFECTS/SONY VEGAS.mp4&filesize=1mb&product_title=""ATMOSFERA HUMO/ATMOSPHERE SMOKE""-PACK AFTER EFFECTS/SONY VEGAS.mp4&installer_file_name=""ATMOSFERA HUMO/ATMOSPHERE SMOKE""-PACK AFTER EFFECTS/SONY VEGAS.mp4&product_file_name=""ATMOSFERA HUMO/ATMOSPHERE SMOKE""-PACK AFTER EFFECTS/SONY VEGAS.mp4&product_download_url=https://r16---sn-25ge7n7l.googlevideo.com/.../mp4&key=yt5&upn=XBjSZ54Eel8&source=youtube&initcwndbps=3461250&requiressl=yes&itag=22&ratebypass=yes&fexp=900718,919142,927622,932404,9406104,9406133,941004,943917,946200,947209,947218,947225,948124,948601,952302,952605,952901,955301,957103,957105,957201,959701&ms=au&mt=1421123779&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,ratebypass,requiressl,source,upn,expire&mv=m&ip=2001:41d0:1:6118:814b:502:f03d:f1f1&signature=3E12716C2288188E815F629C6EC9D3FB89147280.CA4FFB8C4884745337904470070EFAB1C3C8  (--atmosfera humo_atmosphere smoke---pack after effects_sony vegas.mp4.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Nicki Minaj slowed down sounds like Jay-Z.mp4&filesize=1mb&product_title=Nicki Minaj slowed down sounds like Jay-Z.mp4&installer_file_name=Nicki Minaj slowed down sounds like Jay-Z.mp4&product_file_name=Nicki Minaj slowed down sounds like Jay-Z.mp4&product_download_url=http://srv66.clipconverter.cc/download/1sycfqWhqoOwZGxsnZaaa3Fi5KWmqW9u4pSXamlmnGVpZW20qc/.../Nicki Minaj slowed down sounds like Jay-Z.mp4  (nicki minaj slowed down sounds like jay-z.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Maná - Amor Clandestino (Video Oficial).mp3&filesize=1mb&product_title=Maná - Amor Clandestino (Video Oficial).mp3&installer_file_name=Maná - Amor Clandestino (Video Oficial).mp3&product_file_name=Maná - Amor Clandestino (Video Oficial).mp3&product_download_url=http://srv73.clipconverter.cc/download/.../Maná - Amor Clandestino (Video Oficial).mp3  (man - amor clandestino (video oficial).mp3.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Hazim Ra3d | Thunder Jet | ???? ????? [HD].mp4&filesize=1mb&product_title=Hazim Ra3d | Thunder Jet | ???? ????? [HD].mp4&installer_file_name=Hazim Ra3d | Thunder Jet | ???? ????? [HD].mp4&product_file_name=Hazim Ra3d | Thunder Jet | ???? ????? [HD].mp4&product_download_url=https://r9---sn-25ge7n7e.googlevideo.com/.../mp4&requiressl=yes&upn=M1d51DkSpos&mm=31&ipbits=0&mt=1419770936&signature=2AB61F4CE552618EEDE82F785BD6F707AFF70648.89365D39FC090F1EA9A46E2C2AA778C1E431459D&mv=m&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,ratebypass,requiressl,source,upn,expire&ms=au&fexp=900718,916635,927622,932404,9405934,9406134,943917,945907,947209,947218,948124,952302,952605,952901,955301,957103,957105,957201,958100,959701&expire=1419792562&sver=3  (hazim ra3d _ thunder jet _ [hd].mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=???? ?????? ????? ????.mp4.3gp&filesize=1mb&product_title=???? ?????? ????? ????.mp4.3gp&installer_file_name=???? ?????? ????? ????.mp4.3gp&product_file_name=???? ?????? ????? ????.mp4.3gp&product_download_url=https://r1---sn-25ge7n7e.googlevideo.com/.../3gpp&signature=1B469421DCC8CB71F74CD7B5DAF76423318B1E36.7F0838A360432BD96562B47ACF1557B6C1EA89BB&ip=2001:41d0:a:2d68:6359:2c3e:932c:25df&requiressl=yes&ratebypass=yes&&title=???? ?????  (.mp4.3gp.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=111-06-01.mp4&filesize=1mb&product_title=111-06-01.mp4&installer_file_name=111-06-01.mp4&product_file_name=111-06-01.mp4&product_download_url=https://r17---sn-25ge7n7e.googlevideo.com/.../mp4&&title=111-06-01  (111-06-01.mp4.exe)

1 / 68      (Malware)
http://skipperham.info/v2921?self_redirect=0&product_name=Mel B - 30 minutowy trening brzucha, nóg i abs.mp4&filesize=1mb&product_title=Mel B - 30 minutowy trening brzucha, nóg i abs.mp4&installer_file_name=Mel B - 30 minutowy trening brzucha, nóg i abs.mp4&product_file_name=Mel B - 30 minutowy trening brzucha, nóg i abs.mp4&product_download_url=http://srv47.clipconverter.cc/download/1dKygaNlqaqwZG1onpeUaW1i5KWmqW1v4pSXamthm2hsaGy0qc/.../Mel B - 30 minutowy trening brzucha, nóg i abs.mp4  (mel b - 30 minutowy trening brzucha, ng i abs.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Good Morning Pakistan 19 December 2014Ary Digital.mp4&filesize=1mb&product_title=Good Morning Pakistan 19 December 2014Ary Digital.mp4&installer_file_name=Good Morning Pakistan 19 December 2014Ary Digital.mp4&product_file_name=Good Morning Pakistan 19 December 2014Ary Digital.mp4&product_download_url=https://r17---sn-25ge7n7e.googlevideo.com/.../mp4&initcwndbps=3273750&ipbits=0&expire=1419052464&mv=m&ms=au&requiressl=yes&itag=18&ratebypass=yes&mt=1419029525&dur=5544.089&id=o-ABaSdHfqpPQvticj9nC41iBb6qMqzS05CASlLDW3iPgN&upn=JhVOmeUkL3A&sparams=dur,id,initcwndbps,ip,ipbits,itag,mime,mm,ms,mv,ratebypass,requiressl,source,upn,expire&source=youtube&signature=F417565ADACE7286DC1000E979BFEE6F87F2DFF1.97B236E809E42B35253F60E48D7F139A892B38A6&mm=31&ip=2001:41d0:2:5555:3f3c:fbaa:c  (good morning pakistan 19 december 2014ary digital.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Marco Visconti - Tommaso Grossi 1 di 6.mp4&filesize=1mb&product_title=Marco Visconti - Tommaso Grossi 1 di 6.mp4&installer_file_name=Marco Visconti - Tommaso Grossi 1 di 6.mp4&product_file_name=Marco Visconti - Tommaso Grossi 1 di 6.mp4&product_download_url=http://srv33.clipconverter.cc/download/.../Marco Visconti - Tommaso Grossi 1 di 6.mp4  (marco visconti - tommaso grossi 1 di 6.mp4.exe)

1 / 68      (Adware)
http://skipperham.info/v2921?self_redirect=0&product_name=Los Nukak Maku.3gp&filesize=1mb&product_title=Los Nukak Maku.3gp&installer_file_name=Los Nukak Maku.3gp&product_file_name=Los Nukak Maku.3gp&product_download_url=https://r6---sn-p5qlsnsk.googlevideo.com/.../3gpp&signature=9AB4AC1539A98C96B7F9EBC1B7DF7EB88E38EFB2.538C2E61DE0C91D4E2B4EEB10237CF343422D062&ip=2001:41d0:2:25b1:4ade:c24a:62d8:2c7e&ratebypass=yes&&title=Los Nukak Maku  (los nukak maku.3gp.exe)

3 / 68      (PUP)
http://skipperham.info/v2921?self_redirect=0&product_name=Pregnancy Music: Relaxing Harp Music & Soothing Sounds for Pregnant Mother & Newborn Deep Sleep.mp4&filesize=1mb&product_title=Pregnancy Music: Relaxing Harp Music & Soothing Sounds for Pregnant Mother & Newborn Deep Sleep.mp4&installer_file_name=Pregnancy Music: Relaxing Harp Music & Soothing Sounds for Pregnant Mother & Newborn Deep Sleep.mp4&product_file_name=Pregnancy Music: Relaxing Harp Music & Soothing Sounds for Pregnant Mother & Newborn Deep Sleep.mp4&product_download_url=http://srv41.clipconverter.cc/download/.../Pregnancy Music: Relaxing Harp Music & Soothing Sounds for Pregnant Mother & Newborn Deep Sleep.mp4  (pregnancy music_ relaxing harp music.exe)

10 / 68    (PUP)
http://skipperham.info/v2921?self_redirect=0&product_name=??? ?? ?????? ????? ???? ??????? ?? ??? ????? ???????.mp4&filesize=1mb&product_title=??? ?? ?????? ????? ???? ??????? ?? ??? ????? ???????.mp4&installer_file_name=??? ?? ?????? ????? ???? ??????? ?? ??? ????? ???????.mp4&product_file_name=??? ?? ?????? ????? ???? ??????? ?? ??? ????? ???????.mp4&product_download_url=https://r3---sn-p5qlsnes.googlevideo.com/.../mp4  (.mp4.exe)

 
Latest 30 of 90 download URLs

The following 9 files have been seen to comunicate with skipperham.info in live environments.

TCP » 209.99.40.226:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 209.99.40.226:80
browser.exe (speed browser by Smart Applications)

TCP » 209.99.40.226:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 209.99.40.226:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 52.11.167.137:80
download.exe

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

TCP » 54.149.241.47:80
papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80
installer_game develop.exe

TCP » 54.69.228.231:80
download.exe

URL:
http://skipperham.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.