home

www.downloadsbestclear.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
downloadsbestclear.com

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M)
100.00%

avast!
Win32:Malware-gen
33.33%

AhnLab V3 Security
PUP/Win32.Downloader
33.33%

The domain www.downloadsbestclear.com has been seen to resolve to the following 24 IP addresses.

54.230.102.96
server-54-230-102-96.iad2.r.cloudfront.net
April 14, 2016

54.230.102.95
server-54-230-102-95.iad2.r.cloudfront.net
April 14, 2016

54.230.102.226
server-54-230-102-226.iad2.r.cloudfront.net
April 14, 2016

54.230.102.201
server-54-230-102-201.iad2.r.cloudfront.net
April 14, 2016

54.230.102.197
server-54-230-102-197.iad2.r.cloudfront.net
April 14, 2016

54.230.102.171
server-54-230-102-171.iad2.r.cloudfront.net
April 14, 2016

54.230.102.151
server-54-230-102-151.iad2.r.cloudfront.net
April 14, 2016

54.230.102.128
server-54-230-102-128.iad2.r.cloudfront.net
April 14, 2016

52.85.142.89
server-52-85-142-89.iad12.r.cloudfront.net
April 6, 2016

52.85.142.73
server-52-85-142-73.iad12.r.cloudfront.net
April 6, 2016

52.85.142.242
server-52-85-142-242.iad12.r.cloudfront.net
April 6, 2016

52.85.142.162
server-52-85-142-162.iad12.r.cloudfront.net
April 6, 2016

52.85.142.127
server-52-85-142-127.iad12.r.cloudfront.net
April 6, 2016

52.85.142.119
server-52-85-142-119.iad12.r.cloudfront.net
April 6, 2016

52.85.142.96
server-52-85-142-96.iad12.r.cloudfront.net
April 6, 2016

52.85.142.91
server-52-85-142-91.iad12.r.cloudfront.net
April 6, 2016

52.85.131.251
server-52-85-131-251.iad53.r.cloudfront.net
April 4, 2016

52.85.131.202
server-52-85-131-202.iad53.r.cloudfront.net
April 4, 2016

52.85.131.177
server-52-85-131-177.iad53.r.cloudfront.net
April 4, 2016

52.85.131.151
server-52-85-131-151.iad53.r.cloudfront.net
April 4, 2016

52.85.131.138
server-52-85-131-138.iad53.r.cloudfront.net
April 4, 2016

52.85.131.117
server-52-85-131-117.iad53.r.cloudfront.net
April 4, 2016

52.85.131.110
server-52-85-131-110.iad53.r.cloudfront.net
April 4, 2016

52.85.131.53
server-52-85-131-53.iad53.r.cloudfront.net
April 4, 2016

File downloads found at URLs served by www.downloadsbestclear.com.

3 / 68      (PUP)
http://www.downloadsbestclear.com/.../installer.exe  (1d4ce2d623f4823634b38127b89bb69e)

0 / 68
http://www.downloadsbestclear.com/.../installer.exe  (63e08725ee3c4c54bb7dcb89d0a27c25)

1 / 68      (PUP)
http://www.downloadsbestclear.com/.../installer.exe  (2defcc8d476c5cf0de281de75697f9f7)

1 / 68      (PUP)
http://www.downloadsbestclear.com/.../installer.exe  (f7d4.tmp)

The following 10 files have been seen to comunicate with www.downloadsbestclear.com in live environments.

TCP » 52.85.142.127:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.89:80
browser.exe (Browser)

TCP » 52.85.142.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.96:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.119:443
onlineguardian-v2.exe

TCP » 52.85.142.119:80
Client.exe

TCP » 52.85.142.96:443
whatsapptime.exe

TCP » 52.85.142.242:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.91:443
nw.exe

TCP » 52.85.142.96:443
safeguardapp.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.