spath2.path-tracker.com

PRIVACYDOTLINK CUSTOMER 973261

Domain Information

The domain spath2.path-tracker.com registered by PRIVACYDOTLINK CUSTOMER 973261 was initially registered in September of 2011 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
UNIREGISTRAR CORP

Server location:
Arizona, United States (US)

Create date:
Friday, September 30, 2011

Expires date:
Saturday, September 30, 2017

Updated date:
Saturday, March 12, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.IronInstall.Installer (M), PUP.installCore.Clickrunsoftware.Installer (M), Threat.Win.Reputation.IMP, PUP.installCore.Clickrun.Installer (M), PUP.installCore.IronInst.Installer (M), PUP.installCore.ClickRun.Installer (M), PUP.installCore (M)
93.88%

ESET NOD32
Win32/InstallCore.BL potentially unwanted application, Win32/InstallCore.AW potentially unwanted application, Win32/InstallCore.BA potentially unwanted application, Win32/InstallCore.AZ potentially unwanted application
57.14%

avast!
Win32:InstallCore-HG [PUP], Win32:Adware-gen [Adw], Win32:Installer-I [PUP]
55.10%

Dr.Web
Trojan.Packed.24524, Adware.Downware.694, Adware.InstallCore.76, Adware.InstallCore.96
51.02%

F-Prot
W32/InstallCore.R.gen, W32/InstallCore.P.gen, W32/InstallCore.I.gen, W32/InstallCore.S.gen
48.98%

VIPRE Antivirus
Threat.4786018, Threat.4754767
18.37%

Emsisoft Anti-Malware
Gen:Variant.Graftor.265016
16.33%

Norman
Gen:Variant.Graftor.265016
14.29%

F-Secure
Variant.Graftor.265016
10.20%

Sophos
PUA 'Install Core Click run software'
8.16%

The domain spath2.path-tracker.com has been seen to resolve to the following 6 IP addresses.

April 20, 2016

April 1, 2016

ip-50-63-202-104.ip.secureserver.net
November 23, 2015

November 6, 2015

209-99-40-222.fwd.datafoundry.com
October 12, 2015

73.209.210-67.q9.net
January 3, 2014

File downloads found at URLs served by spath2.path-tracker.com.

3 / 68      (Adware)

5 / 68      (Adware)

 
Latest 30 of 71 download URLs

The following 53 files have been seen to comunicate with spath2.path-tracker.com in live environments.

 
Latest 20 of 59 files

URL:
http://spath2.path-tracker.com/

Web server:
DOSarrest

Facebook:
Likes:  6
Shares:  70
Comments:  4

Statistics are for the previous month.