d.playjewelquest.com
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain d.playjewelquest.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Friday, March 7, 2014
Expires date:
Tuesday, March 7, 2017
Updated date:
Tuesday, March 8, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (79% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.WesternWebApplications.F, PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.WesternWebApplications.L, PUP.Injekt.TodaySolutions.Installer (M), PUP.Injekt.WesternWebApplications.Installer (M), PUP.Injekt.TodaySol.Installer (M)
90.91%
Malwarebytes
PUP.Optional.JewelQuest.A, PUP.Optional.MultiExtension.A, PUP.Optional.OpenCandy
36.36%
ESET NOD32
MSIL/Adware.PullUpdate, MSIL/Adware.PullUpdate.J.gen (variant)
36.36%
McAfee
Artemis!E47401E0AC15, Artemis!F95C0D3FCE7D, Artemis!BDC607507763
27.27%
VIPRE Antivirus
Injekt
27.27%
NANO AntiVirus
Riskware.Win32.Agent.dbyfjc, Riskware.Win32.OpenCandy.cxjcyz
18.18%
Trend Micro House Call
Suspicious_GEN.F47V0801, TROJ_GEN.F47V0413
18.18%
Comodo Security
UnclassifiedMalware, ApplicUnwnt
18.18%
Avira AntiVirus
ADWARE/Adware.Gen, ADWARE/Adware.Gen7
18.18%
Dr.Web
Adware.Plugin.36, Adware.OpenCandy.4
18.18%
K7 AntiVirus
Adware , Trojan
18.18%
SUPERAntiSpyware
Trojan.Agent/Gen-Graftor
9.09%
avast!
Win32:Adware-gen [Adw]
9.09%
Agnitum Outpost
PUA.PullUpdate
9.09%
Sophos
Generic PUA LJ
9.09%
The domain d.playjewelquest.com has been seen to resolve to the following 82 IP addresses.
server-52-84-125-115.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-45.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-27.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-4.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-215.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-214.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-184.iad16.r.cloudfront.net
July 18, 2016
server-52-84-125-130.iad16.r.cloudfront.net
July 18, 2016
server-52-85-131-66.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-16.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-12.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-244.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-204.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-143.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-89.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-75.iad53.r.cloudfront.net
July 18, 2016
server-52-85-131-115.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-37.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-15.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-203.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-178.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-158.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-142.iad53.r.cloudfront.net
April 18, 2016
server-52-85-131-117.iad53.r.cloudfront.net
April 18, 2016
server-54-192-195-186.iad53.r.cloudfront.net
March 4, 2016
server-54-192-195-79.iad53.r.cloudfront.net
March 4, 2016
server-54-192-195-85.iad53.r.cloudfront.net
February 28, 2016
server-54-192-195-198.iad53.r.cloudfront.net
February 28, 2016
server-54-192-195-134.iad53.r.cloudfront.net
February 26, 2016
server-54-192-195-120.iad53.r.cloudfront.net
February 26, 2016
Showing 30 of 82 IP Addresses
File downloads found at URLs served by d.playjewelquest.com.
The following 22 files have been seen to comunicate with d.playjewelquest.com in live environments.
URL:
http://d.playjewelquest.com/
Network:
Amazon Cloudfront
