download.searchpro.co
Moniker Privacy Services (Proxy Registrant)
Domain Information
The domain download.searchpro.co is registered by proxy through KEY-SYSTEMS GMBH and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Moniker Privacy Services
Registrar:
KEY-SYSTEMS GMBH
Server location:
Virginia, United States (US)
Create date:
Thursday, February 27, 2014
Expires date:
Thursday, February 26, 2015
Updated date:
Wednesday, April 30, 2014
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
McAfee
Artemis!D44983BFC580
100.00%
Malwarebytes
PUP.Optional.Visicom
100.00%
Trend Micro House Call
Suspicious_GEN.F47V0806
100.00%
avast!
Win32:Dropper-gen [Drp]
100.00%
G Data
Win32.Trojan.Agent.5V35R1
100.00%
Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
100.00%
Baidu Antivirus
PUA.Win32.Visicom
100.00%
ESET NOD32
Win32/Toolbar.Visicom
100.00%
The domain download.searchpro.co has been seen to resolve to the following 8 IP addresses.
server-54-230-102-251.iad2.r.cloudfront.net
August 17, 2014
server-54-230-100-84.iad2.r.cloudfront.net
August 17, 2014
server-54-230-100-47.iad2.r.cloudfront.net
August 17, 2014
server-54-230-100-2.iad2.r.cloudfront.net
August 17, 2014
server-216-137-33-232.iad2.r.cloudfront.net
August 17, 2014
server-54-230-103-167.iad2.r.cloudfront.net
August 17, 2014
server-54-230-103-103.iad2.r.cloudfront.net
August 17, 2014
server-54-230-103-66.iad2.r.cloudfront.net
August 17, 2014
File downloads found at URLs served by download.searchpro.co.
URL:
http://download.searchpro.co/
Network:
Amazon Cloudfront
