www.papulisher.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.papulisher.com is registered by proxy through ENOM, INC. and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Jose, California within the United States which resides on the EGIHosting network.
Registrar:
ENOM, INC.

Server location:
California, United States (US)

Create date:
Monday, May 12, 2014

Expires date:
Tuesday, May 12, 2015

Updated date:
Monday, May 12, 2014

ASN:
AS18779 EGIHOSTING - EGIHosting,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ClovermediaSL.E, PUP.Tuguu.Cloverme.Bundler (M)
100.00%

MicroWorld eScan
Adware.Navipromo.CIP
50.00%

McAfee
PUP-FAO!D0DC4EF40DE5
50.00%

Malwarebytes
PUP.Optional.DomaIQ
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

avast!
Win32:Adware-BQE [PUP]
50.00%

Kaspersky
not-a-virus:AdWare.Win32.Lollipop
50.00%

Bitdefender
Adware.Navipromo.CIP
50.00%

Agnitum Outpost
PUA.Lollipop
50.00%

Lavasoft Ad-Aware
Adware.Navipromo.CIP
50.00%

Emsisoft Anti-Malware
Adware.Navipromo.CIP
50.00%

F-Secure
Adware.Navipromo.CIP
50.00%

Avira AntiVirus
APPL/DomaIQ.Gen
50.00%

McAfee Web Gateway
PUP-FJP!0AE9AFDD9360
50.00%

Sophos
DomainIQ pay-per install
50.00%

The domain www.papulisher.com has been seen to resolve to the following IP address.

vpncloud.us
May 14, 2014

File downloads found at URLs served by www.papulisher.com.

1 / 68      (Adware)
http://www.papulisher.com/.../Java.exe  (8f29f1ade6aabfc824ec29058af95947)

24 / 68    (Adware)
http://www.papulisher.com/.../Java.exe  (d0dc4ef40de5c38a06ccca354e3eb9f9)

URL:
http://www.papulisher.com/

Web server:
nginx