» eep9.playzuu.com
Overview
Analysis
IPs Addresses (2)
Downloads (36)
Website Detail

eep9.playzuu.com

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain eep9.playzuu.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Registrant:

Domains By Proxy, LLC

Registrar:

GODADDY.COM, LLC

Server location:

Oregon, United States (US)

Create date:

Tuesday, March 31, 2015

Expires date:

Friday, March 31, 2017

Updated date:

Friday, April 1, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

playzuu.com

Whois:

2 playzuu.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.PlayZuuTRUDIGIT, Threat.Win.Reputation.IMP, PUP.PlayZuuTRUDIGIT (M), PUP.PlayZuuT (M), PUP (M)

100.00%

avast!

Win32:Malware-gen

44.12%

Avira AntiVirus

BDS/Backdoor.Gen3

44.12%

ESET NOD32

Win32/ArcadeParlor.G potentially unwanted application

41.18%

Agnitum Outpost

Backdoor.Agent

41.18%

VIPRE Antivirus

Threat.4150696

38.24%

Malwarebytes

PUP.Optional.PlayZuu.A

35.29%

G Data

Gen:Variant.Graftor.189812

35.29%

Emsisoft Anti-Malware

Gen:Variant.Strictor.88605

35.29%

Lavasoft Ad-Aware

Gen:Variant.Strictor.88605

35.29%

Bitdefender

Gen:Variant.Graftor.189812

35.29%

MicroWorld eScan

Gen:Variant.Graftor.189812

35.29%

Norman

Gen:Variant.Strictor.88605

35.29%

F-Secure

Gen:Variant.Strictor.88605

35.29%

herdProtect (fuzzy)

a variant of ac72c6807e2a71d9fe15bec7218a31143f4d5f9a, a variant of 1f73c76c4eb0eafbd0e85f8346f772a4c28b85b5

5.88%

The domain eep9.playzuu.com has been seen to resolve to the following 2 IP addresses.

74.120.16.179

September 15, 2016

54.191.156.170

ec2-54-191-156-170.us-west-2.compute.amazonaws.com

May 15, 2015

File downloads found at URLs served by eep9.playzuu.com.

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTQyNjQ4OTc4MzLboUUqDbSzw7qnNQPG/.../XRA8 XAU6xWmJ6ZJFDPTxj5aSlmPbIcO6BBEHxgE5A6wwE= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTMxODczNTYxNTfboUUqDbSzw7qnNQPG/.../Qgz3EGtaBVM= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUHDcPgj4f5YmKgnFqPobRIKkfCmlWEKwejUQA NYwEwyMCgKgjoEPs4GChncWf0lmsIJSV2DVbNVGvcA4GuyhVclE7I80XGPDQ= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTM2Nzc4MjY1NznboUUqDbSzw7qnNQPG/enJDf85T3ARVUEMUChnAjCGWaC9X2bKRIb/.../ms7X5KMJSWeeMJJCe8J00dHUyA= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTM5OTgyOTc0NzTboUUqDbSzw7qnNQPG/.../C9rQRjJIiJCrrxF1gkcKns4uKS4m7RAcBHSSeudiXVWP0TvshftIBiodnUm80gUp5Av50u5Zp1OHlG5e23qChQ= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTM4ODMxNTEwMzLboUUqDbSzw7qnNQPG/.../gyfw8= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTE5MzA2MzY1MDLboUUqDbSzw7qnNQPG/.../9FZq0Lx3oshWFLY4RtNjiRobsu84x0= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTM4NzUxNTYxMDHboUUqDbSzw7qnNQPG/.../bRyolo= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTI3MjU4NTAxOTPboUUqDbSzw7qnNQPG/enJDf85T3ARVUH8RPIoTUsED/RX7PRJAa0jba04TFphrc7BRWYAfuwi99gGizL1Afg91nY4GzIIoVKLMB12Yt/.../GuSVI= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../zlPcBFVQVU2IS0JRERMT3sWzd0S4og4K0j87a0HoFbVWQr6JVfJeuAfagPKYfSsRydk8nB4iUtXQVUwTirSWVSugGIJIisVtr 1nXgPig== (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../zlPcBFVQf7 ohRE 0MdsSb0GTat04LhhLpjUMXOJ0YQjxTOmGX6LO17ElJuPt4 9MGcVXkMTYqMJocsasV8TJgPTYSRzRGC4po4GdyhsA== (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../zlPcBFVQTAvuDOWzYlUbsgBDdF01HYjnbYZyOgQvji4pLibtEBwkxYc7pi6r6pR 87MSzRrqCTWtqEo01XbCUSEuKhjgZ2bvILx31fkyg== (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTEyMDUwODg2MDnboUUqDbSzw7qnNQPG/enJDf85T3ARVUH /qIURPtDHe2D8HyrBPckQToNtL5ShsHeUA6BrXo7CwTTouyZJ4Gm2zDVrqgiTxap2DiYdO6m7/.../7T6uzRu7bjY47So= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUE7k1eG9WZQKfxKwafSN0TWiEm x5J1wMHsSkccrUGaAdBAdQCJXXMnuC9LC8OzoJteeBZlW5 YtKaRSbQkGiqwF6FiFVyw7Jc= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=OTk5OTA0MzE0ONuhRSoNtLPDuqc1A8b96ckN/zlPcBFVQXsDWpdvjf9DMzDDbXlOMbLno/l0ivUQeLJZItX/.../oZMcLOAxKCpYkSBUT7hXuIZrTqFe22guZ95HrKKWzEebg== (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUHZpVRIT8TKLLd4MivEHUzI0qBMLUjy6PJKedfTwj SbZuxAWCK8IBqnrQkyORDvPLLrasosOMFJyCZghb sFoV0owhVvoFXsE= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUH8RPIoTUsED enT1qTJpZCLpeWkI1zW43NVcugllSJoZ0pHKHTa28Iny0kfHYy8GTu53QxH1ZwRcQ7fH8rCorSJPJoBCqfyGE= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUGMrpJ7gEvy UMA2Xhv91Yo4cGTAaXvNhNCUSwNL0cqgO3SjP66USRyX8shz8OKwkiknTdFG5FPpmuwisgr0B0vlCs6ITsAWRs= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTEyMTQwNjU0NDjboUUqDbSzw7qnNQPG/.../54cx AQyglxSsuBRGh4= (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTE2NTQxNDIwMjXboUUqDbSzw7qnNQPG/enJDf85T3ARVUHfahRZZF7MHTOcrG/.../lliMmweof4fHt8Dpzc Dz8Jy3Xso= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=OTkwMTAwMDI5MtuhRSoNtLPDuqc1A8b96ckN/zlPcBFVQQxQKGcCMIZZL3AVWnTQI lJVRIhUeF4nGBEQ5dwLLAf4g6/zUrHjYWB8gb lHj8I al0W efsxl/dNCBokKFBfofQUfE/.../w== (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTE2NDc4NDc4MzHboUUqDbSzw7qnNQPG/.../YRx0yAbVDwCn8aw0nkUUFnLI= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUE7k1eG9WZQKcXfPinpo8M36F1QEUsTvrjsSkccrUGaAQklJFSgQk8C4Fd5Hu11Yt3dZDvxqakmVauyvHvuonMlCPEgsxstdes= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTIwMTcwNzk3MDTboUUqDbSzw7qnNQPG/enJDf85T3ARVUHoCnA 25J71lgjt5bPnt28302U/.../r9bHHj714Ay0tTM961UPxhI= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTMyODgyMTQ2OTnboUUqDbSzw7qnNQPG/.../AddCSXKqTTJo7qcjmbeMDsSkccrUGaAd3V8HfpeXsPSJ92bFO nAFJg9HSGuXuydplINOFC2A2stY4BPJDRY= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=OTc0MjUzMzY5NtuhRSoNtLPDuqc1A8b96ckN/.../vTcrCDD4td1gQ4SDTjyMT9cxbYEjOWszFm3WZOJxOe9zPw4W2DmDWhNj6B67APGPVDeGqLlPL2brMkWvTQ== (playzuu.exe)

1 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../zlPcBFVQegKcD7bknvWKcImT6X0kNNzxyQSqXH8bzyMT9cxbYEjOWszFm3WZOLrbZsDS 7ccHaU4tPqiwMaUCh4NLWv391nAOuWRStZAQ== (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/.../enJDf85T3ARVUG2h9ESY7V8WpEKzaXHktQvErqUzR6FDW7NVcugllSJoUwDdCxKtgRggwCwFyxuA8YM9robr6CPFDNr5px7invXLdPUoQzxnIE= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTQyNzMyODU5MzbboUUqDbSzw7qnNQPG/.../B3o26Vpx2bmFHcXQ8W4= (playzuu.exe)

14 / 68 (Adware)

http://eep9.playzuu.com/dnld/installer.php?inst=YTIxOTYyNTUyNDDboUUqDbSzw7qnNQPG/.../bbG7a3YzsHElsSZ3brcCcl5iyZncuVbB 7MESwQn5jH957zO3ICLHpVKWMMmm1pm2CwU= (playzuu.exe)

Latest 30 of 36 download URLs

URL:

http://eep9.playzuu.com/

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.