home

www.stockbitsquick.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
stockbitsquick.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/InstallCore.AFY potentially unwanted application
100.00%

Reason Heuristics
PUP.InstallCore.ENG (M)
100.00%

The domain www.stockbitsquick.com has been seen to resolve to the following 16 IP addresses.

52.85.131.125
server-52-85-131-125.iad53.r.cloudfront.net
June 5, 2016

52.85.131.95
server-52-85-131-95.iad53.r.cloudfront.net
June 5, 2016

52.85.131.82
server-52-85-131-82.iad53.r.cloudfront.net
June 5, 2016

52.85.131.37
server-52-85-131-37.iad53.r.cloudfront.net
June 5, 2016

52.85.131.18
server-52-85-131-18.iad53.r.cloudfront.net
June 5, 2016

52.85.131.207
server-52-85-131-207.iad53.r.cloudfront.net
June 5, 2016

52.85.131.185
server-52-85-131-185.iad53.r.cloudfront.net
June 5, 2016

52.85.131.132
server-52-85-131-132.iad53.r.cloudfront.net
June 5, 2016

52.85.131.167
server-52-85-131-167.iad53.r.cloudfront.net
April 10, 2016

52.85.131.155
server-52-85-131-155.iad53.r.cloudfront.net
April 10, 2016

52.85.131.141
server-52-85-131-141.iad53.r.cloudfront.net
April 10, 2016

52.85.131.51
server-52-85-131-51.iad53.r.cloudfront.net
April 10, 2016

52.85.131.239
server-52-85-131-239.iad53.r.cloudfront.net
April 10, 2016

52.85.131.235
server-52-85-131-235.iad53.r.cloudfront.net
April 10, 2016

52.85.131.206
server-52-85-131-206.iad53.r.cloudfront.net
April 10, 2016

52.85.131.196
server-52-85-131-196.iad53.r.cloudfront.net
April 10, 2016

File downloads found at URLs served by www.stockbitsquick.com.

1 / 68      (Malware)
http://www.stockbitsquick.com/.../installer.exe  (76d3ba27f4a80aaf0172060fec1631e2)

4 / 68      (PUP)
http://www.stockbitsquick.com/.../installer.exe  (fba89a8891f61f7617fbb45856ff4020)

The following file have been seen to comunicate with www.stockbitsquick.com in live environments.

TCP » 52.85.131.196:80
SimpleDriverUpdater.exe (Simple Driver Updater)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.