home

www.contenttownlaboratory.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
contenttownlaboratory.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Gen:Variant.Mikey.30271
100.00%

F-Secure
Variant.Mikey.30271
100.00%

Norman
Gen:Variant.Mikey.30271
100.00%

The domain www.contenttownlaboratory.com has been seen to resolve to the following 8 IP addresses.

54.192.195.80
server-54-192-195-80.iad53.r.cloudfront.net
February 8, 2016

54.192.195.54
server-54-192-195-54.iad53.r.cloudfront.net
February 8, 2016

54.192.195.36
server-54-192-195-36.iad53.r.cloudfront.net
February 8, 2016

54.192.195.181
server-54-192-195-181.iad53.r.cloudfront.net
February 8, 2016

54.192.195.151
server-54-192-195-151.iad53.r.cloudfront.net
February 8, 2016

54.192.195.123
server-54-192-195-123.iad53.r.cloudfront.net
February 8, 2016

54.192.195.115
server-54-192-195-115.iad53.r.cloudfront.net
February 8, 2016

54.192.195.105
server-54-192-195-105.iad53.r.cloudfront.net
February 8, 2016

File downloads found at URLs served by www.contenttownlaboratory.com.

3 / 68      (Malware)
http://www.contenttownlaboratory.com/.../installer.exe  (79bd6a342e53050b7700fda202f3a8ef)

The following 3 files have been seen to comunicate with www.contenttownlaboratory.com in live environments.

TCP » 54.192.195.181:443
onlineguardian-v2.exe

TCP » 54.192.195.181:443
online-guardian-v2.exe

TCP » 54.192.195.123:80
onlysetup.exe (by Pay By Ads)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.