cdn.click-download.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.click-download.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Remove Malware from cdn.click-download.com - Powered by Reason Core Security
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Tuesday, April 29, 2014

Expires date:
Friday, April 29, 2016

Updated date:
Sunday, March 22, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.STMSetup.CC, PUP.STMSetup.E, PUP.STMSetup.G, PUP.Installer.STMSetup.P, PUP.installCore.STMSetup.Installer (M), PUP.Installer.STMSetup.Q, PUP.STMSetup.K, PUP.STMSetup.H, PUP.Installer.STMSetup.L, PUP.Installer.STMSetup.K, PUP.ironSource, PUP.installCore.STMSetup (M), PUP.installCore.MaxSetup (M)
97.73%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, InstallCore, Threat.4786018
86.36%

Baidu Antivirus
Adware.Win32.InstallCore
86.36%

K7 Gateway Antivirus
Unwanted-Program , Trojan , Adware
84.09%

Dr.Web
Adware.InstallCore.386
84.09%

AVG
InstallCore, Adware InstallCore.LO, Generic
84.09%

Sophos
Install Core Click run software, PUA.Install Core Click run software, PUA 'Install Core Click run software'
81.82%

K7 AntiVirus
Unwanted-Program , Trojan , Adware
79.55%

Norman
InstallCore.CERT
79.55%

ESET NOD32
Win32/InstallCore.OU (variant), Win32/InstallCore.PK (variant), Win32/InstallCore.PL (variant), Win32/InstallCore.RA (variant)
61.36%

McAfee Web Gateway
Artemis!DE5E59968C1F, Artemis!F51706EA5BD6, BehavesLike.Win32.CryptInno.bc, Artemis!223D0DA40BCE
43.18%

Avira AntiVirus
W32/Mabezat, Adware/InstallCore.A.990, Adware/InstallCore.PK.11, ADWARE/InstallCore.Gen9, Adware/InstallCore.PL.10
38.64%

herdProtect (fuzzy)
a variant of 065d053e4fa88820a67e31fcf6baf41597ba6114, a variant of 5bad20d3caea6b2704a2eb9d4f46d2ba6d9abc99, a variant of 70421e86d9ee82009f6adecde8210cc78afbb29f
31.82%

McAfee
Artemis!DE5E59968C1F, Artemis!F51706EA5BD6, Artemis!22CFF4CE7234, Artemis!223D0DA40BCE, Artemis!A97DEC64E7BA, Artemis!33E2DF4EDDD6, Artemis!BB4234AFD9DD, Artemis!DBC66ADEA066
25.00%

Trend Micro House Call
Suspicious_GEN.F47V0731, Suspicious_GEN.F47V0827, Suspicious_GEN.F47V0625, TROJ_GEN.R0C1C0OJO14, TROJ_GEN.R00JC0OJA14, TROJ_GEN.R0C1C0OJ914
20.45%

The domain cdn.click-download.com has been seen to resolve to the following 23 IP addresses.

ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

ec2-54-191-37-5.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-52-34-170-106.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-52-25-23-136.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-54-148-75-228.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-52-24-62-64.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-54-149-60-150.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-54-187-50-237.us-west-2.compute.amazonaws.com
May 4, 2015

ec2-54-186-63-148.us-west-2.compute.amazonaws.com
May 3, 2015

ec2-54-154-154-29.eu-west-1.compute.amazonaws.com
May 3, 2015

ec2-54-68-107-243.us-west-2.compute.amazonaws.com
September 27, 2014

ec2-54-218-67-214.us-west-2.compute.amazonaws.com
September 27, 2014

ec2-54-69-12-159.us-west-2.compute.amazonaws.com
September 21, 2014

ec2-54-186-219-20.us-west-2.compute.amazonaws.com
September 5, 2014

ec2-54-213-239-193.us-west-2.compute.amazonaws.com
September 2, 2014

ec2-54-200-190-106.us-west-2.compute.amazonaws.com
August 23, 2014

ec2-54-187-25-184.us-west-2.compute.amazonaws.com
August 12, 2014

ec2-54-201-96-17.us-west-2.compute.amazonaws.com
August 1, 2014

ec2-54-191-124-126.us-west-2.compute.amazonaws.com
July 10, 2014

ec2-54-245-92-67.us-west-2.compute.amazonaws.com
June 5, 2014

ec2-50-112-100-135.us-west-2.compute.amazonaws.com
May 31, 2014

File downloads found at URLs served by cdn.click-download.com.

1 / 68      (Adware)

The following file have been seen to comunicate with cdn.click-download.com in live environments.

Remove Malware from cdn.click-download.com - Powered by Reason Core Security