home

couponbar.coupons.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain couponbar.coupons.com is registered by proxy through Network Solutions, LLC and was originally registered in September of 1994. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Mountain View, California within the United States which resides on the Coupons, Inc network.
Registrar:
Network Solutions, LLC

Server location:
California, United States (US)

Create date:
Wednesday, September 7, 1994

Expires date:
Friday, September 6, 2019

Updated date:
Tuesday, July 8, 2014

ASN:
AS19950 COUPONS-COM-INCORPORATED - Coupons.com Incorporated,US

Root domain:
coupons.com

Whois:
2 coupons.com records

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Coupons.M, PUP.Installer.Coupons.N, PUP.Installer.Coupons.Q, PUP.Coupons.Installer, PUP.Coupons.Couponsorporated.Installer (M)
94.74%

Dr.Web
Adware.Coupons.34, Adware.Coupons.38, Adware.Coupons.42
63.16%

Trend Micro House Call
TROJ_GEN.F47V0918, TROJ_GEN.F47V0612, Suspicious_GEN.F47V0428
57.89%

XVirus List
Win32.Detected
47.37%

Emsisoft Anti-Malware
Gen:Trojan.Heur.KT.2.nm0@aKuY1cci
42.11%

ESET NOD32
Detection.Undefined, Win32/Adware.Coupons.AA application
26.32%

herdProtect (fuzzy)
a variant of 7b6ffc5bb1935fdce988c4e208074c130b6f24f4, a variant of 76db13ed444aab565319e113a203b4160a711682, a variant of d767eee7e0bdc79d2ffe774f2c800114fca10d29
15.79%

Panda Antivirus
PUP/CouponPrinter, Generic Suspicious
10.53%

Kaspersky
not-a-virus:AdWare.Win32.Coupons
10.53%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
5.26%

F-Secure
Application:W32/Generic.70053c248f!Online
5.26%

McAfee
Artemis!37FB70C5426E
5.26%

Zillya! Antivirus
Adware.Coupons.Win32.22
5.26%

Baidu Antivirus
Adware.Win32.Coupons
5.26%

Fortinet FortiGate
Adware/Coupons
5.26%

The domain couponbar.coupons.com has been seen to resolve to the following 2 IP addresses.

64.75.15.141
February 3, 2014

204.76.213.141
December 25, 2013

File downloads found at URLs served by couponbar.coupons.com.

5 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=19111&nid=10&zid=qv73  (couponprinter.exe)

2 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?pid=13953&nid=10&zid=jl94&partner=no  (suf80_launch.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15230&nid=10&zid=my89  (couponprintercps.exe)

3 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15693&nid=20&zid=lk31  (couponprinter.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=17401&nid=10&zid=qo28  (couponprintercps.exe)

1 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15457&nid=10&zid=mi54  (couponprintercps.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=17711&nid=20&zid=uk57  (couponprintercps.exe)

3 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=11952&nid=10&zid=it55  (couponprinter.exe)

1 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=12812&nid=10&zid=dl89  (couponprintercps.exe)

4 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=11540&nid=10&zid=bm91  (couponprinter.exe)

2 / 68      (false positives)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15578&nid=10&zid=qn13  (wrar420.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15781&nid=10&zid=ir96  (couponprintercps.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=13953&nid=10&zid=jl94  (couponprintercps.exe)

2 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15700&nid=10&zid=rw21  (suf80_launch.exe)

2 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=14997&nid=10&zid=iq55  (suf80_launch.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15044&nid=10&zid=xl95  (couponprintercps.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=13615&nid=10&zid=au93  (couponprintercps.exe)

1 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=17941&nid=10&zid=vl70  (couponprintercps.exe)

6 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=18851&nid=20&zid=tr94  (couponprintercps.exe)

8 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=11366&nid=15&zid=wp69  (couponprintercps.exe)

2 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15811&nid=10&zid=vb38  (suf80_launch.exe)

1 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15686&nid=20&zid=wu74  (couponprintercps.exe)

1 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15582&nid=10&zid=mk80  (couponprintercps.exe)

2 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15467&nid=10&zid=ma60  (suf80_launch.exe)

1 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?partner=no&pid=15220&nid=10&zid=py63  (couponprintercps.exe)

2 / 68      (PUP)
http://couponbar.coupons.com/CouponPrinterInstall.asp?pid=15300&nid=10&zid=ow88&partner=no  (suf80_launch.exe)

URL:
http://couponbar.coupons.com/

Google Analytics:
UA-20307442

Title:
“CouponBar”

SSL certificate subject:
CN=*.coupons.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
Microsoft-IIS/7.5 (ASP.NET)

Facebook:
Likes:  4
Shares:  24
Comments:  5

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.