home

freepdf-converter.org

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain freepdf-converter.org is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Virginia, United States (US)

Whois:
2 freepdf-converter.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewMedia.Installer.installCore.Installer (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RES (M)
80.00%

avast!
Malware-gen
40.00%

VIPRE Antivirus
Threat.4788237, Threat.4786018
40.00%

ESET NOD32
Win32/InstallCore.XB potentially unwanted application, Win32/InstallCore.XA potentially unwanted application
40.00%

Avira AntiVirus
PUA/InstallCore.A.2387, ADWARE/InstallCore.Gen
40.00%

G Data
Win32.Application.InstallCore.CZ
40.00%

herdProtect (fuzzy)
a variant of fd9ab8f943c6a75c2559c258db3e53105770f214
20.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dqheub
20.00%

Dr.Web
Trojan.InstallCore.152
20.00%

K7 AntiVirus
Unwanted-Program
20.00%

Comodo Security
Application.Win32.InstallCore.DSB
20.00%

AVG
Generic
20.00%

The domain freepdf-converter.org has been seen to resolve to the following 6 IP addresses.

52.20.217.65
ec2-52-20-217-65.compute-1.amazonaws.com
January 29, 2016

52.4.0.73
ec2-52-4-0-73.compute-1.amazonaws.com
January 28, 2016

52.0.211.253
ec2-52-0-211-253.compute-1.amazonaws.com
January 6, 2016

54.173.245.246
ec2-54-173-245-246.compute-1.amazonaws.com
May 3, 2015

54.210.142.26
ec2-54-210-142-26.compute-1.amazonaws.com
November 3, 2014

54.164.190.20
ec2-54-164-190-20.compute-1.amazonaws.com
November 1, 2014

File downloads found at URLs served by freepdf-converter.org.

1 / 68      (Adware)
http://freepdf-converter.org/?dl=1&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1LSkDj rcWDK4m7z0RvmiWAkDjIKiWXzcRAzAzOZMFASDPDdlChV8dNzgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjL0OZi4AZMq  (ChromeSetup.exe)

1 / 68      (PUP)
http://freepdf-converter.org/?dl=1&dr=cHaWck1zI3lwDSD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVngm7dREhKVuvmAWASDChTMm7dlChV83Ajc3AjnRNZnm7K2pDZ1fAZc4NTa4NzndAg==&pd=2323UEVw rWPDk1z dD0UmNJ i==&campaignId=9jn0AjLROZiyAZMq  (skypesetup.exe)

1 / 68      (Adware)
http://freepdf-converter.org/?dl=1&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzn0AzAzOZMFASDPDdlChV83AzCyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjL1AZa4AZMq  (chromesetup.exe)

10 / 68    (Adware)
http://freepdf-converter.org/?dl=1&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1NKkDj rcWDK4m7z0RvmiWAkDjIKiWXzLzAzAzOZMFASDPDdlChV8FOZgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjLzATawAZMq  (chromesetup.exe)

7 / 68      (PUP)
http://freepdf-converter.org/?dl=1&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzC4OZLyATn0ASDPDdlChV81NzaFNTnzAT7y&pd=2323Um2yDK50crNPcHszUmNJ i==&campaignId=9jn0AjLzAjidAZMq  (javasetup.exe)

November 1, 2014
www.freepdf-converter.org

URL:
http://freepdf-converter.org/

Title:
“PDF Creator”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.