The domain cdn.akndelivery.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in November of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Dublin City, Ireland (IE)
Create date:
Wednesday, November 12, 2014
Expires date:
Saturday, November 12, 2016
Updated date:
Friday, November 13, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Optional.Installer.F, PUP.Installer.DeliverFriedCookie.R, PUP.Installer.ironSource, PUP.InstallCore.Bundler (M), Win32.Generic.Adknowledge.Bundler.Meta, PUP.installCore.AVSoftware.Installer (M), PUP.InstallCore.Installer.Installer (M), PUP.installCore.Scramblecode.Installer (M), PUP.AdKnowledge.Stumbleboot.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.installCore.Scramble.Installer (M), PUP.Downloadius.Internet.Installer (M), PUP.AdKnowledge.Stumbleb.Bundler (M), PUP.Amonitize.Installer (M), PUP.AdKnowledge.Stumbleb.Installer (M), PUP.NewMedia.NMH.Bundler (M), PUP.Softpulse.TrustedD.Bundler (M), PUP.AdKnowledge (M), PUP.IMALI (M), PUP.installCore (M), PUP.InstallCore.RES (M)
100.00%
Dr.Web
Program.Unwanted.79, Trojan.InstallCore.32, Trojan.InstallCore.50, Trojan.InstallCore.642
13.04%
AVG
LionSea Software co., Generic, InstallCore
13.04%
K7 AntiVirus
Trojan , Unwanted-Program , Adware
10.87%
VIPRE Antivirus
InstallCore, AdKnowledge, Threat.4150696
10.87%
Avira AntiVirus
Adware/InstallCo.zkz, ADWARE/InstallCore.Gen9, Adware/InstallCo.zlz, PUA/InstallCore.lop
10.87%
Comodo Security
Application.Win32.FriedCookie.CIRK, Application.Win32.InstallCore.EA, Application.Win32.InstallCore.KJH, Application.Win32.InstallCore.DQU
8.70%
Baidu Antivirus
Adware.Win32.InstallCore
8.70%
ESET NOD32
Win32/InstallCore.UL (variant), Win32/InstallCore.UE (variant), Win32/InstallCore.SX (variant), Win32/InstallCore.VW potentially unwanted (variant)
8.70%
Qihoo 360 Security
Win32/Virus.Adware.8aa, Win32/Virus.Adware.f22, Win32/Virus.Adware.e85, Win32/Virus.2c8
8.70%
Sophos
Install Core Click run software, Generic PUA PC, Generic PUA PE
6.52%
McAfee
Artemis!C84760146A5A, Artemis!37A9DD959F8D, Trojan.Artemis!2FC907089279
6.52%
G Data
Win32.Application.Agent.KRXG08, Win32.Application.Agent.MDX924, Win32.Application.InstallCore.EG
6.52%
Bkav FE
W32.HfsAdware
4.35%
Trend Micro House Call
Suspicious_GEN.F47V0117, Suspicious_GEN.F47V0128
4.35%
The domain cdn.akndelivery.com has been seen to resolve to the following 9 IP addresses.
ec2-54-76-211-110.eu-west-1.compute.amazonaws.com
May 5, 2015
ec2-52-10-0-96.us-west-2.compute.amazonaws.com
May 5, 2015
ec2-54-171-1-146.eu-west-1.compute.amazonaws.com
May 4, 2015
ec2-54-148-73-114.us-west-2.compute.amazonaws.com
May 3, 2015
ec2-54-171-47-185.eu-west-1.compute.amazonaws.com
May 2, 2015
ec2-54-149-115-86.us-west-2.compute.amazonaws.com
March 6, 2015
ec2-54-187-120-35.us-west-2.compute.amazonaws.com
January 22, 2015
ec2-54-186-167-43.us-west-2.compute.amazonaws.com
January 8, 2015
ec2-54-68-221-84.us-west-2.compute.amazonaws.com
December 30, 2014
File downloads found at URLs served by cdn.akndelivery.com.