Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)
The domain cdn.ffontscontent.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Oregon, United States (US)
Sunday, April 27, 2014
Wednesday, April 27, 2016
Sunday, March 22, 2015
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Detections (95% detected)
PUP.STMSetup.X, PUP.installCore.STMSetup (M), PUP.installCore.MaxSetup (M), PUP.installCore (M)
Trojan.MulDrop5.10078, Trojan.MulDrop5.33380, Trojan.InstallCore.1903
Win32/InstallCore.OU potentially unwanted application, Win32/InstallCore.OL potentially unwanted application, Win32/InstallCore.ON potentially unwanted application
K7 Gateway Antivirus
Adware , Unwanted-Program , Trojan
Install Core Click run software
Unwanted-Program , Trojan
McAfee Web Gateway
The domain cdn.ffontscontent.com has been seen to resolve to the following 7 IP addresses.
July 1, 2015
December 1, 2014
November 10, 2014
September 4, 2014
August 16, 2014
June 20, 2014
May 29, 2014
File downloads found at URLs served by cdn.ffontscontent.com.
The following file have been seen to comunicate with cdn.ffontscontent.com in live environments.