dl.supercoolonlineapps.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain dl.supercoolonlineapps.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in June of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Monday, June 03, 2013

Expires date:
Wednesday, June 03, 2015

Updated date:
Thursday, July 31, 2014

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CoolAppDownloads.O, PUP.Installer.BestFreeDownloads.O, PUP.installCore (M)
100.00%

Malwarebytes
PUP.Optional.InstallCore
83.33%

VIPRE Antivirus
Trojan.Win32.Generic
83.33%

Avira AntiVirus
ADWARE/InstallCore.Gen7
83.33%

Dr.Web
Trojan.Packed.24524, Trojan.Packed.2782, Trojan.Packed.28695
83.33%

AVG
Generic, InstallCore
83.33%

ESET NOD32
Win32/InstallCore.IJ (variant), Win32/InstallCore.LM (variant)
66.67%

Trend Micro House Call
TROJ_GEN.F47V0326, TROJ_GEN.F47V0102
66.67%

Comodo Security
Application.Win32.InstallCore.BWAN
50.00%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
33.33%

F-Prot
W32/A-42c63c6c
33.33%

Vba32 AntiVirus
Downware.InstallCore
33.33%

Sophos
Install Core Click run software, PUA 'Install Core Click run software'
33.33%

Antiy Labs AVL
Trojan/Win32.SGeneric
33.33%

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
33.33%

The domain dl.supercoolonlineapps.com has been seen to resolve to the following 4 IP addresses.

August 16, 2016

unallocated.barefruit.co.uk
May 3, 2015

ec2-107-20-220-228.compute-1.amazonaws.com
January 6, 2014

ec2-107-22-217-162.compute-1.amazonaws.com
January 6, 2014

File downloads found at URLs served by dl.supercoolonlineapps.com.

1 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (c81bd183b9b0b9598c3f2e0b2ab2e199)

1 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (5dafbd18c83411759a528352ebf6e7be)

29 / 68    (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (7899d8a759acaf39b1deb744feccbaa2)

29 / 68    (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (1a247e36e69d4f52c56dfa50fa77f72d)

9 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (0a85ff6fc5a7bd29887343e37beb1732)

9 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (36d6ee67ca475f1b9e038f1c0d839060)

9 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (9ccde1f55ec753618cdc93a1d4e8e0d3)

9 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (aad8003e50cd4f606ad3cc346f170b30)

9 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (9eb5383fbb34059c2adeddb1ba715957)

9 / 68      (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (c5f4d47240b01bedbac02e1120ccd7e2)

17 / 68    (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (3ef7117ebc4011dd24e192fcec65de89)

17 / 68    (Adware)
http://dl.supercoolonlineapps.com/FlvPlayerSetup.exe  (cff046f326b2ed583f28f385f2099af9)

The following 230 files have been seen to comunicate with dl.supercoolonlineapps.com in live environments.

 
Latest 20 of 230 files

URL:
http://dl.supercoolonlineapps.com/

Web server:
nginx/1.0.15