home

www.contenttagdl.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
contenttagdl.com

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Norman
Gen:Variant.Adware.Symmi.59817, Gen:Variant.Graftor.271713
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.59817
50.00%

Dr.Web
Trojan.Swizzor.19587
50.00%

F-Secure
Variant.Graftor.271713
50.00%

ESET NOD32
Win32/FusionCore.F potentially unwanted application
50.00%

avast!
Win32:Adware-gen [Adw]
50.00%

Reason Heuristics
PUP.FusionCore.Bundle.ET (M)
50.00%

The domain www.contenttagdl.com has been seen to resolve to the following 24 IP addresses.

52.85.131.168
server-52-85-131-168.iad53.r.cloudfront.net
July 12, 2016

52.85.131.62
server-52-85-131-62.iad53.r.cloudfront.net
July 12, 2016

52.85.131.50
server-52-85-131-50.iad53.r.cloudfront.net
July 12, 2016

52.85.131.48
server-52-85-131-48.iad53.r.cloudfront.net
July 12, 2016

52.85.131.34
server-52-85-131-34.iad53.r.cloudfront.net
July 12, 2016

52.85.131.29
server-52-85-131-29.iad53.r.cloudfront.net
July 12, 2016

52.85.131.228
server-52-85-131-228.iad53.r.cloudfront.net
July 12, 2016

52.85.131.190
server-52-85-131-190.iad53.r.cloudfront.net
July 12, 2016

52.85.131.171
server-52-85-131-171.iad53.r.cloudfront.net
April 13, 2016

52.85.131.148
server-52-85-131-148.iad53.r.cloudfront.net
April 13, 2016

52.85.131.138
server-52-85-131-138.iad53.r.cloudfront.net
April 13, 2016

52.85.131.127
server-52-85-131-127.iad53.r.cloudfront.net
April 13, 2016

52.85.131.37
server-52-85-131-37.iad53.r.cloudfront.net
April 13, 2016

52.85.131.232
server-52-85-131-232.iad53.r.cloudfront.net
April 13, 2016

52.85.131.211
server-52-85-131-211.iad53.r.cloudfront.net
April 13, 2016

52.85.131.178
server-52-85-131-178.iad53.r.cloudfront.net
April 13, 2016

54.192.195.20
server-54-192-195-20.iad53.r.cloudfront.net
February 27, 2016

54.192.195.219
server-54-192-195-219.iad53.r.cloudfront.net
February 27, 2016

54.192.195.197
server-54-192-195-197.iad53.r.cloudfront.net
February 27, 2016

54.192.195.194
server-54-192-195-194.iad53.r.cloudfront.net
February 27, 2016

54.192.195.152
server-54-192-195-152.iad53.r.cloudfront.net
February 27, 2016

54.192.195.149
server-54-192-195-149.iad53.r.cloudfront.net
February 27, 2016

54.192.195.131
server-54-192-195-131.iad53.r.cloudfront.net
February 27, 2016

54.192.195.54
server-54-192-195-54.iad53.r.cloudfront.net
February 27, 2016

File downloads found at URLs served by www.contenttagdl.com.

5 / 68      (PUP)
http://www.contenttagdl.com/.../installer.exe  (e8eb2c6caf3f68d814a01ca31e84c5f7)

0 / 68
http://www.contenttagdl.com/.../installer.exe  (installer.exe.downloading)

3 / 68      (PUP)
http://www.contenttagdl.com/.../installer.exe  (6e2775a845aa71876faa88b21f3cc207)

The following 4 files have been seen to comunicate with www.contenttagdl.com in live environments.

TCP » 54.192.195.197:443
online-guardian-v2.0.9.exe

TCP » 52.85.131.148:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.197:443
online-guardian-v2.0.9.exe

TCP » 54.192.195.197:443
onlineguardian-v2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.