clean-software.com
Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)
Domain Information
The domain clean-software.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Virginia, United States (US)
Create date:
Sunday, February 15, 2015
Expires date:
Wednesday, February 15, 2017
Updated date:
Wednesday, February 10, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
(M), PUP.installCore (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.InstallCore.RES (M), PUP.InstallCore.RE48 (M), PUP.InstallCore (M)
93.75%
Malwarebytes
PUP.Optional.InstallCore.A
12.50%
Comodo Security
Application.Win32.InstallCore.AZC, Application.Win32.InstallCore.NWEM
12.50%
G Data
Win32.Application.InstallCore.EG
12.50%
NANO AntiVirus
Trojan.Win32.Agent.dhbpge
6.25%
ESET NOD32
Win32/InstallCore.YW potentially unwanted (variant)
6.25%
Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
6.25%
herdProtect (fuzzy)
a variant of 78d996c48a592411b0d115706f6a480ae1425bca
6.25%
Trend Micro House Call
Suspicious_GEN.F47V0427
6.25%
Baidu Antivirus
Adware.Win32.InstallCore
6.25%
Dr.Web
Trojan.InstallCore.45
6.25%
ESET NOD32
Win32/InstallCore.YH potentially unwanted application
6.25%
VIPRE Antivirus
Threat.4786018
6.25%
Bkav FE
W32.HfsAdware
6.25%
The domain clean-software.com has been seen to resolve to the following 9 IP addresses.
ec2-52-22-16-9.compute-1.amazonaws.com
May 19, 2016
ec2-52-0-81-237.compute-1.amazonaws.com
May 19, 2016
ec2-54-165-159-105.compute-1.amazonaws.com
May 19, 2016
ec2-52-22-149-102.compute-1.amazonaws.com
February 24, 2016
ec2-54-88-19-50.compute-1.amazonaws.com
February 24, 2016
ec2-52-71-119-31.compute-1.amazonaws.com
February 24, 2016
ec2-54-174-79-49.compute-1.amazonaws.com
August 17, 2015
ec2-54-165-201-145.compute-1.amazonaws.com
August 17, 2015
ec2-54-165-16-203.compute-1.amazonaws.com
August 17, 2015
File downloads found at URLs served by clean-software.com.
URL:
http://clean-software.com/
Network:
Amazon Web Services (AWS), running an EC2 instance