Whois Privacy Protection Service, Inc.  (Proxy Registrant)

Domain Information

The domain is registered by proxy through NAME.COM, INC. and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.

Server location:
Oregon, United States (US)

Create date:
Tuesday, July 09, 2013

Expires date:
Saturday, July 09, 2016

Updated date:
Monday, April 20, 2015

AS16509 AMAZON-02 -, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine

Reason Heuristics
PUP.Tuguu (M), PUP.Tuguu.Bundler (M), PUP.Tuguu.LunacomInteractive.Bundler (M), PUP.Tuguu.Awimba.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Tuguu.LunacomI.Bundler (M)

The domain has been seen to resolve to the following 6 IP addresses.
April 2, 2016
May 6, 2015
May 6, 2015
August 1, 2014
May 31, 2014
May 1, 2014

File downloads found at URLs served by

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

Latest 30 of 83 download URLs

The following 8 files have been seen to comunicate with in live environments.


“ - gufiledownload Resources and Information.”

“ is your first and best source for information about gufiledownload . Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!”

Amazon Web Services (AWS), running an EC2 instance

Web server: