ftp.coupons.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain ftp.coupons.com is registered by proxy through Network Solutions, LLC and was originally registered in September of 1994. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Mountain View, California within the United States which resides on the Savvis network.
Registrar:
Network Solutions, LLC

Server location:
California, United States (US)

Create date:
Wednesday, September 7, 1994

Expires date:
Friday, September 6, 2019

Updated date:
Tuesday, May 5, 2015

ASN:
AS19950 COUPONS-COM-INCORPORATED - Coupons.com Incorporated,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Coupons.N, PUP.Coupons.Couponsorporated.Installer (M)
100.00%

XVirus List
Win32.Detected
80.00%

Trend Micro House Call
TROJ_GEN.F47V0824, TROJ_GEN.F47V0612, Suspicious_GEN.F47V0413
70.00%

Dr.Web
Adware.Coupons.34, Adware.Coupons.38
60.00%

Emsisoft Anti-Malware
Gen:Trojan.Heur.KT.2.nm0@aKuY1cci
40.00%

herdProtect (fuzzy)
a variant of 59fbdeddb3e881557d16b29574eec96ee4160a93, a variant of f029289591caa8ad07d1cb2d238e0b514cb718e1
20.00%

ESET NOD32
Detection.Undefined
20.00%

Panda Antivirus
PUP/CouponPrinter
20.00%

McAfee
Artemis!98DE8544C8FB
20.00%

The domain ftp.coupons.com has been seen to resolve to the following IP address.

December 1, 2014

File downloads found at URLs served by ftp.coupons.com.

8 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (738523dd6d0dbcd17c5a2b2aa1a480eb)

2 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (b8f81a8b637607849d710885f681b8d2)

1 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (302df6ade573d3b71e75a953a9f0fcc6)

9 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (28b78a1ab9f541a0a85cb853eb556fe8)

2 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (31729649070eac72a1ae6ad6faf8724e)

5 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (f236e125917fe693a38eefb905b30544)

2 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (3cdd1b974bdf6c027ba1fdf3776a6cd7)

4 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (1818c8afc607ef46e7f3d09b8f620f93)

6 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (d71b400965811fe49bd9554356da139d)

4 / 68      (PUP)
http://ftp.coupons.com/.../couponprinter.exe  (0d28fcc64cdf57e2eb0296f4c11cb2b6)

URL:
http://ftp.coupons.com/

SSL certificate subject:
CN=*.coupons.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
Microsoft-IIS/6.0 (ASP.NET)