home

www.premiumdownloads-free.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.premiumdownloads-free.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Dublin City, Ireland (IE)

Create date:
Thursday, February 19, 2015

Expires date:
Friday, February 19, 2016

Updated date:
Friday, April 1, 2016

Root domain:
premiumdownloads-free.com

Whois:
2 premiumdownloads-free.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CoolAppDownloads.O, PUP.BestFreeDownloads.a, PUP.installCore.CoolAppD.Installer (M)
100.00%

Malwarebytes
PUP.Optional.CoolApp, PUP.Optional.BestFree
50.00%

Dr.Web
Trojan.MulDrop5.10078
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

AVG
Adware InstallCore, MalSign.Generic
50.00%

Sophos
Install Core Click run software
50.00%

avast!
Win32:Malware-gen
25.00%

Avira AntiVirus
ADWARE/InstallCore.Gen7
25.00%

Vba32 AntiVirus
BScope.Trojan.MTA.0162
25.00%

ESET NOD32
Win32/InstallCore.JW potentially unwanted application
25.00%

Comodo Security
Application.Win32.Installcore.VDFG
25.00%

IKARUS anti.virus
AdWare.InstallCore
25.00%

Zillya! Antivirus
Adware.Agent.Win32.8971
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

ESET NOD32
Win32/InstallCore.MX (variant)
25.00%

The domain www.premiumdownloads-free.com has been seen to resolve to the following 6 IP addresses.

54.229.130.160
ec2-54-229-130-160.eu-west-1.compute.amazonaws.com
May 1, 2014

54.229.168.240
ec2-54-229-168-240.eu-west-1.compute.amazonaws.com
May 1, 2014

54.229.74.109
ec2-54-229-74-109.eu-west-1.compute.amazonaws.com
May 1, 2014

54.194.102.99
ec2-54-194-102-99.eu-west-1.compute.amazonaws.com
February 24, 2014

54.194.48.236
ec2-54-194-48-236.eu-west-1.compute.amazonaws.com
February 24, 2014

54.229.185.225
ec2-54-229-185-225.eu-west-1.compute.amazonaws.com
February 24, 2014

File downloads found at URLs served by www.premiumdownloads-free.com.

1 / 68      (Adware)
http://www.premiumdownloads-free.com/download-manager/bm/.../?dl=1&SourceId=366&CreativeId=7484576&SectionId=367212&dp=000104daec972a8dc4794b5cfbf16948bf94f  (downloadmanagersetup.exe)

1 / 68      (Adware)
http://www.premiumdownloads-free.com/flv-player/bm/.../?dl=1&SourceId=366&CreativeId=7537211&SectionId=367212&dp=000089d23c9eeecc04f21a5a7feda0688f132  (flvplayersetup.exe)

7 / 68      (Adware)
http://www.premiumdownloads-free.com/flv-player/mb/.../?dl=1&SourceId=366&CreativeId=10968759&PublisherId=246311&SectionId=465158&dp=00010ff94f0b484fc4377b0191e4b6a5e67c3  (d23d9f42aff7f9222bf46a2e19b3fe88.exe)

14 / 68    (Adware)
http://www.premiumdownloads-free.com/flv-player/mb/.../?dl=1&SourceId=366&CreativeId=10968759&PublisherId=246311&SectionId=465158&dp=00010ff94f0b484fc4377b0191e4b6a5e67c3  (flvplayersetup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.