home

fun-media-player.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain fun-media-player.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in September of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Virginia, United States (US)

Create date:
Saturday, September 21, 2013

Expires date:
Wednesday, September 21, 2016

Updated date:
Sunday, August 23, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
5 fun-media-player.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.NewMedia.NMH.Bundler (M), PUP.InstallCore.RES (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RE48 (M), PUP.InstallCore.Internet.Installer.Meta (M)
93.33%

VIPRE Antivirus
Threat.4150696, Threat.4786018
20.00%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application, Win32/InstallCore.ZP potentially unwanted application, Win32/InstallCore.ZM potentially unwanted application
20.00%

G Data
Win32.Application.InstallCore.EG
20.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
20.00%

Malwarebytes
PUP.Optional.InstallCore.A
13.33%

AVG
Adware InstallCore.AIX, Generic
13.33%

Baidu Antivirus
Adware.Win32.InstallCore
6.67%

Fortinet FortiGate
Riskware/InstallCore
6.67%

Dr.Web
Trojan.InstallCore.152
6.67%

Bkav FE
W32.HfsAdware
6.67%

K7 AntiVirus
Unwanted-Program
6.67%

Panda Antivirus
PUP/Multitoolbar
6.67%

The domain fun-media-player.com has been seen to resolve to the following 17 IP addresses.

54.165.159.105
ec2-54-165-159-105.compute-1.amazonaws.com
May 15, 2016

52.22.16.9
ec2-52-22-16-9.compute-1.amazonaws.com
May 15, 2016

52.0.81.237
ec2-52-0-81-237.compute-1.amazonaws.com
May 15, 2016

52.71.119.31
ec2-52-71-119-31.compute-1.amazonaws.com
January 27, 2016

52.22.149.102
ec2-52-22-149-102.compute-1.amazonaws.com
January 27, 2016

54.88.19.50
ec2-54-88-19-50.compute-1.amazonaws.com
January 27, 2016

54.165.16.203
ec2-54-165-16-203.compute-1.amazonaws.com
June 26, 2015

54.174.79.49
ec2-54-174-79-49.compute-1.amazonaws.com
June 26, 2015

54.165.201.145
ec2-54-165-201-145.compute-1.amazonaws.com
June 26, 2015

54.175.83.177
ec2-54-175-83-177.compute-1.amazonaws.com
June 19, 2015

54.152.255.1
ec2-54-152-255-1.compute-1.amazonaws.com
June 19, 2015

54.152.67.176
ec2-54-152-67-176.compute-1.amazonaws.com
June 19, 2015

107.23.16.170
ec2-107-23-16-170.compute-1.amazonaws.com
November 12, 2014

54.210.0.183
ec2-54-210-0-183.compute-1.amazonaws.com
September 27, 2014

54.209.189.234
ec2-54-209-189-234.compute-1.amazonaws.com
August 23, 2014

107.23.191.83
ec2-107-23-191-83.compute-1.amazonaws.com
August 12, 2014

54.210.212.240
ec2-54-210-212-240.compute-1.amazonaws.com
August 7, 2014

File downloads found at URLs served by fun-media-player.com.

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=AjC3NTazNTawAM==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXznRNZidOTMFASDPDdlChV83NTgwAZA3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0Azn1NZMwAZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=OTCdAzMyNjgd&osos=VdluDrW3cw==&dr=cHaWck13IKFC 32zUK1J2mllUK1PIdVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzMwOZ7dOTMFASDPDdlChV8FNZ73OZ73AZaz&pd=2323UmxJ2d4tcdWm2H2PcmLu7dWt&campaignId=9jn0AzM3AjnwAZMq  (windowsmoviemakersetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=Ajg4NzcyNZgdNw==&osos=VdluDrW3cw==&dr=cHaWck1w 32lcEsJIKF0UXDpDX2lcQD0 T1z2dVl2Zamc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fOTCzNZA4AZCRvm5EIKiWXzL0NZa1NTgRNZa=&pd=2323Um2l2k11cdLu7dWt&campaignId=9jn0AjCwNzayAZMq  (powerpointviewersetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=Ajg4NzcyAzi3Ai==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXznRNZidOTMFASDPDdlChV8yAzcFOTa3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AjCyNzc0AZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=OZizOZnwAZn0&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1E dWE rLtDK5y2rgmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNj7ROZC4AZCRvm5EIKiWXzMzAjiyNzAyNZa=&pd=2323UENJDEx37XvlUK2l2kFj d0=&campaignId=9jn0AjCdATcdAZMq  (googleearthsetup.exe)

1 / 68      (Adware)
http://fun-media-player.com/?dl=1&pi=Ajg4NzcyAZgzAw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxSDj rcWDK4m7z0RvmiWAkDjIKiWXzAyAzAzOZMFASDPDdlChV80NzgyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AjgyNZ7wAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1z2rVP SD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDrLm7dAWxnLm7dREhKxlvmAWASDChTMm7dlChV81Aj7dNjCwOTnm7K2pDZ1fAZg0NZLdNzMyAw==&pd=2323UmxJ2d4t7XswcyFj d0=&campaignId=9jn0AjCROZCyAZMq  (steamsetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=ATnzOTc0NZc4Ai==&osos=VdluDrW3cw==&dr=cHaWck10 d10 d0tIrWtDSD0 T1z2dVl2kDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV84NjL3NjCwOTnm7K2pDZ1fATnzOT74NzMyAw==&pd=2323UmRp2mLtcrWwUmNJ i==&campaignId=9jn0AzndAZ7dAZMq  (tomtomhomesetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXi0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z15LyDj rcWDK4m7z0RvmiWAkDjIKiWXzc4OTi1OZMFASDPDdlChV84Nzg3OZcFATiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjCzNz70AZMq  (minecraftsetup.exe)

1 / 68      (Adware)
http://fun-media-player.com/?dl=1&pi=Azn4NTndNZCRNi==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWTVgm7dREhKVuvmAWASDChTMm7dlChV8yOTg3AzgwOTnm7K2pDZ1fNTCyATaROTn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0Azn1OTM0AZMq  (firefoxsetup.exe)

11 / 68    (Adware)
http://fun-media-player.com/?dl=1&pi=Az71NZAdOZa1Aw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxSDj rcWDK4m7z0RvmiWAkDjIKiWXzaFAjAzOZMFASDPDdlChV8dAznyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzMRNTL4AZMq  (googlechromesetup.exe)

1 / 68      (Adware)
http://fun-media-player.com/?dl=1&pi=Ajg4NzcyAj7yAM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzCFATL0OZMFASDPDdlChV83NTM3OTaFATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajg3NTAdAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=ATLRATg1OTMFNg==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXi0vENyhKvEvmCWcyDEcmlChSDBDz1mcQDj7z1rLQDj rcWDEam7z0RvmiWAkDjIKiWXzczAzL1OZMFASDPDdlChV8yAT74AZgFATiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0AjC1AjL4AZMq  (minecraftsetup.exe)

5 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=OZCRNTMzAjg=&osos=VdluDrW3cw==&dr=cHaWck1PDH2j rVP mVyvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChV8dOTLFOZCwOTnm7K2pDZ1fNzCFAznzAjnyAw==&pd=2323Um5wcHNGIKFCUmNJ i==&campaignId=9jn0AznFAzMdAZMq  (adwcleanersetup.exe)

8 / 68      (PUP)
http://fun-media-player.com/?dl=1&pi=AjM1NzAzAj7zNw==&osos=VdluDrW3cw==&dr=cHaWck1wDr7tcmVPDrVyvExthXN3DKV0vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzL0Nz7yAZnFASDPDdlChV8dATgFNTMdATaz&pd=2323Uml0UKD1 QFj d0=&campaignId=9jn0AzndAZnyAZMq  (pdfreadersetup.exe)

December 27, 2013
www.fun-media-player.com

URL:
http://fun-media-player.com/

Google Analytics:
UA-44245779

Title:
“Windows Media Player”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.