cdn.click-download.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.click-download.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Tuesday, April 29, 2014

Expires date:
Saturday, April 29, 2017

Updated date:
Wednesday, March 30, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.STMSetup.W, PUP.STMSetup.P, PUP.Installer.STMSetup.Q, PUP.Installer.STMSetup.E, PUP.Installer.STMSetup.L, PUP.Installer.STMSetup.BB, PUP.STMSetup.J, PUP.ironSource, PUP.installCore.STMSetup.Installer (M), PUP.installCore.MaxSetup (M), PUP.installCore.STMSetup (M), PUP.installCore (M)
100.00%

Dr.Web
Adware.InstallCore.386
42.55%

VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic, Threat.4786018, InstallCore
42.55%

AVG
Adware InstallCore.LO, Generic
42.55%

K7 AntiVirus
Unwanted-Program , Trojan , Adware
40.43%

Baidu Antivirus
Adware.Win32.InstallCore
40.43%

Sophos
Install Core Click run software, PUA 'Install Core Click run software'
40.43%

Norman
InstallCore.CERT
36.17%

ESET NOD32
Win32/InstallCore.OU (variant), Win32/InstallCore.PK (variant), Win32/InstallCore.PL (variant), Win32/InstallCore.RA (variant)
29.79%

herdProtect (fuzzy)
a variant of 065d053e4fa88820a67e31fcf6baf41597ba6114, a variant of fdbde5c909f69bb11c98d6647463d5614daae3d9, a variant of 5bad20d3caea6b2704a2eb9d4f46d2ba6d9abc99
17.02%

McAfee
Artemis!DE5E59968C1F, Artemis!4E5F33BFFC02, Artemis!51B2DD23E8E2, Artemis!E1D2304B770D, Artemis!EA341F202E1D, Artemis!E76075A2F073
17.02%

ESET NOD32
Win32/InstallCore.OU potentially unwanted application, Win32/InstallCore.PZ potentially unwanted application, Win32/InstallCore.PL potentially unwanted application
12.77%

Avira AntiVirus
Adware/InstallCore.A.990, ADWARE/InstallCore.Gen9, Adware/InstallCore.PL.10
12.77%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
10.64%

Fortinet FortiGate
Riskware/InstallCore
10.64%

The domain cdn.click-download.com has been seen to resolve to the following 28 IP addresses.

ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 28, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 28, 2016

ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 28, 2016

ec2-54-191-37-5.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-52-34-170-106.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-52-25-23-136.us-west-2.compute.amazonaws.com
December 15, 2015

ec2-54-148-75-228.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-52-24-62-64.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-54-149-60-150.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-54-187-50-237.us-west-2.compute.amazonaws.com
May 4, 2015

ec2-54-186-63-148.us-west-2.compute.amazonaws.com
May 3, 2015

ec2-54-154-154-29.eu-west-1.compute.amazonaws.com
May 3, 2015

ec2-54-68-107-243.us-west-2.compute.amazonaws.com
September 27, 2014

ec2-54-218-67-214.us-west-2.compute.amazonaws.com
September 27, 2014

ec2-54-69-12-159.us-west-2.compute.amazonaws.com
September 21, 2014

ec2-54-186-219-20.us-west-2.compute.amazonaws.com
September 5, 2014

ec2-54-213-239-193.us-west-2.compute.amazonaws.com
September 2, 2014

ec2-54-200-190-106.us-west-2.compute.amazonaws.com
August 23, 2014

ec2-54-187-25-184.us-west-2.compute.amazonaws.com
August 12, 2014

ec2-54-201-96-17.us-west-2.compute.amazonaws.com
August 1, 2014

ec2-54-191-124-126.us-west-2.compute.amazonaws.com
July 10, 2014

ec2-54-245-92-67.us-west-2.compute.amazonaws.com
June 5, 2014

ec2-50-112-100-135.us-west-2.compute.amazonaws.com
May 31, 2014

File downloads found at URLs served by cdn.click-download.com.

The following 7 files have been seen to comunicate with cdn.click-download.com in live environments.