The domain www.unzip-it.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Virginia, United States (US)
Create date:
Thursday, February 13, 2014
Expires date:
Monday, February 13, 2017
Updated date:
Monday, January 25, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.ICSSetup.P, PUP.Bundler.ironSource, Threat.ironSource.Bundler, PUP.installCore.ICSSetup.Installer (M), PUP.FileOpener.Setup.Installer.Meta (M), PUP.installCore (M)
100.00%
Dr.Web
Trojan.MulDrop5.10078, Trojan.Packed.24524
10.00%
VIPRE Antivirus
Threat.4150696
10.00%
ESET NOD32
Win32/InstallCore.PK potentially unwanted application, Win32/InstallCore.OG potentially unwanted application, Win32/InstallCore.LM potentially unwanted application
10.00%
K7 AntiVirus
Unwanted-Program
10.00%
Sophos
Install Core Click run software
10.00%
Avira AntiVirus
ADWARE/InstallCore.Gen9
10.00%
G Data
Win32.Adware.InstallCore.BV, Win32.Application.InstallCore
6.00%
Baidu Antivirus
Adware.Win32.InstallCore
4.00%
F-Prot
W32/A-2d45491d, W32/A-bcc0ab9c
4.00%
NANO AntiVirus
Riskware.Win32.InstallCore.dgjqde, Riskware.Win32.InstallCore.dmlwjp
4.00%
Vba32 AntiVirus
Downware.InstallCore
4.00%
Zillya! Antivirus
Adware.InstallCore.Win32.44
4.00%
herdProtect (fuzzy)
a variant of 6857ce9cb47877489b356297a61a26aa21e738bd, a variant of 0440c6c02d96eb07c3c5efeb323e4e3dfc1fbf27
4.00%
The domain www.unzip-it.com has been seen to resolve to the following 9 IP addresses.
ec2-54-84-209-207.compute-1.amazonaws.com
April 4, 2016
ec2-54-88-93-196.compute-1.amazonaws.com
March 1, 2016
ec2-54-88-203-136.compute-1.amazonaws.com
January 31, 2016
ec2-54-165-29-156.compute-1.amazonaws.com
May 6, 2015
ec2-54-85-139-155.compute-1.amazonaws.com
August 7, 2014
ec2-54-209-82-48.compute-1.amazonaws.com
August 7, 2014
ec2-54-86-23-250.compute-1.amazonaws.com
August 1, 2014
ec2-54-229-8-90.eu-west-1.compute.amazonaws.com
June 5, 2014
ec2-54-76-109-19.eu-west-1.compute.amazonaws.com
June 5, 2014
File downloads found at URLs served by www.unzip-it.com.
URL:
http://www.unzip-it.com/
Google Analytics:
UA-53254711
Network:
Amazon Web Services (AWS), running an EC2 instance
Facebook:
Likes: 2,434
Shares: 2,508
Comments: 2,953
Statistics are for the previous month.