www.great-onlineapps.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.great-onlineapps.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in June of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Dublin City, Ireland (IE)

Create date:
Monday, June 3, 2013

Expires date:
Friday, June 3, 2016

Updated date:
Wednesday, May 27, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BestFreeDownloads.O, PUP.Installer.CoolAppDownloads.O, PUP.InstallCore.Bundler (M), PUP.installCore.CoolAppDownloads.Installer (M), PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Installer (M), PUP.installCore.Coolappt (M), PUP.installCore.Coolappt.Installer (M), PUP.installCore.CoolAppD.Installer (M), PUP.installCore.BestFree.Installer (M), PUP.InstallCore.RE11 (M), PUP.installCore.Bestopap.Installer (M), PUP.installCore (M)
76.00%

Dr.Web
Trojan.Packed.24524, Trojan.MulDrop5.10078, Trojan.Packed.28695, Trojan.MulDrop5.53987, Trojan.Packed.31388, Adware.InstallCore.132
48.00%

avast!
Win32:Malware-gen, Win32:Adware-gen [Adw], Win32:Dropper-gen [Drp]
46.00%

ESET NOD32
Win32/InstallCore.JW potentially unwanted application, Win32/Kryptik.BWJC trojan, Win32/InstallCore.D potentially unwanted application
44.00%

VIPRE Antivirus
Trojan.Win32.Generic, InstallCore, Threat.4150696, Threat.4786018
34.00%

Emsisoft Anti-Malware
Application.Generic.931548, Application.Bundler.BD, Gen:Variant.Adware.Strictor.66006
32.00%

Norman
InstallCore.UMFM, Gen:Variant.Adware.Strictor.66006, Application.Generic.931548
28.00%

Lavasoft Ad-Aware
Application.Generic.931548, Application.Bundler.BD, Gen:Variant.Adware.Strictor.66006
22.00%

F-Secure
Riskware.Application.Bundler.BD, Gen:Variant.Adware.Strictor, Riskware.Application.Generic.931548
22.00%

Sophos
Install Core Click run software, PUA 'Install Core Click run software'
20.00%

Clam AntiVirus
Win.Trojan.Installcore-251, Win.Adware.Agent-53542, Win.Adware.Installcore-565
14.00%

Malwarebytes
PUP.Optional.InstallCore, PUP.Optional.CoolAppDownloads, PUP.Optional.InstallCore.A
12.00%

AVG
MalSign.Generic, Adware InstallCore.LA, Generic_c, Adware InstallCore.VH, Adware InstallCore.WG
12.00%

Avira AntiVirus
Adware/InstallCore.A.186, ADWARE/InstallCore.Gen7, Adware/InstallCo.CI, PUA/InstallCore.Gen7
10.00%

ESET NOD32
Win32/InstallCore.MX (variant), Win32/InstallCore.BY (variant), Win32/InstallCore.CF (variant)
8.00%

The domain www.great-onlineapps.com has been seen to resolve to the following 13 IP addresses.

ec2-52-18-58-170.eu-west-1.compute.amazonaws.com
November 10, 2015

ec2-54-194-169-19.eu-west-1.compute.amazonaws.com
January 7, 2015

ec2-54-72-121-228.eu-west-1.compute.amazonaws.com
January 7, 2015

ec2-54-229-24-120.eu-west-1.compute.amazonaws.com
January 7, 2015

ec2-54-72-81-84.eu-west-1.compute.amazonaws.com
July 14, 2014

ec2-176-34-148-223.eu-west-1.compute.amazonaws.com
July 14, 2014

ec2-54-76-7-156.eu-west-1.compute.amazonaws.com
July 14, 2014

ec2-54-229-130-160.eu-west-1.compute.amazonaws.com
May 5, 2014

ec2-54-229-168-240.eu-west-1.compute.amazonaws.com
May 5, 2014

ec2-54-229-74-109.eu-west-1.compute.amazonaws.com
May 5, 2014

ec2-54-72-149-41.eu-west-1.compute.amazonaws.com
April 4, 2014

ec2-54-72-141-38.eu-west-1.compute.amazonaws.com
April 4, 2014

ec2-54-246-208-251.eu-west-1.compute.amazonaws.com
April 4, 2014

File downloads found at URLs served by www.great-onlineapps.com.

 
Latest 30 of 57 download URLs

URL:
http://www.great-onlineapps.com/

Google Analytics:
UA-42802819

Title:
“Hello World from HTML by Koding”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.7 (Ubuntu)