The domain cdn.opulencecontent.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Oregon, United States (US)
Create date:
Tuesday, April 29, 2014
Expires date:
Friday, April 29, 2016
Updated date:
Sunday, March 22, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
ESET NOD32
Win32/InstallCore.PK (variant), Win32/InstallCore.VW (variant), Win32/InstallCore.VW potentially unwanted (variant), Win32/InstallCore.WO potentially unwanted (variant)
71.43%
VIPRE Antivirus
InstallCore, Trojan.Win32.Generic
57.14%
Avira AntiVirus
ADWARE/InstallCore.Gen9, Adware/InstallCo.zlz, Adware/InstallCore.776152
57.14%
Reason Heuristics
PUP.STMSetup.FF, PUP.Installer.InstallCore.Installer, PUP.InstallCore.Installer.Installer (M), PUP.installCore.DownloadandInstall (M)
57.14%
Qihoo 360 Security
Win32/Virus.Adware.f22, HEUR/QVM06.1.Malware.Gen
42.86%
Trend Micro House Call
Suspicious_GEN.F47V0123, Suspicious_GEN.F47V0206, Suspicious_GEN.F47V0318
42.86%
Fortinet FortiGate
Riskware/InstallCore
42.86%
K7 AntiVirus
Unwanted-Program , Trojan
28.57%
Comodo Security
ApplicUnwnt, Application.Win32.FriedCookie.CIRK
28.57%
Dr.Web
Adware.InstallCore.386, Trojan.InstallCore.53
28.57%
McAfee
Artemis!6450C8BEAD14, Artemis!65A66F84875B
28.57%
G Data
Win32.Application.Agent.4U5E6F, Win32.Application.InstallCore.DI
28.57%
Baidu Antivirus
Adware.Win32.InstallCore
28.57%
Norman
InstallCore.CERT
14.29%
Sophos
Install Core Click run software
14.29%
The domain cdn.opulencecontent.com has been seen to resolve to the following 11 IP addresses.
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 18, 2016
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 18, 2016
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-54-171-1-146.eu-west-1.compute.amazonaws.com
May 5, 2015
File downloads found at URLs served by cdn.opulencecontent.com.
The following 6 files have been seen to comunicate with cdn.opulencecontent.com in live environments.