The domain cdn.clickdownloadfiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in October of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Oregon, United States (US)
Create date:
Wednesday, October 29, 2014
Expires date:
Saturday, October 29, 2016
Updated date:
Thursday, September 24, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.AstroDeliveryFriedCookie.BB, PUP.AstroDeliveryFriedCookie.L, PUP.AstroDeliveryFriedCookie.J, PUP.Installer.AstroDeliveryFriedCookie.Y, PUP.Installer.AstroDeliveryFriedCookie.N, PUP.ironSource, PUP.Installer.ironSource, PUP.Bundler.ironSource, PUP.Installer.InstallCore.Installer, PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.FC (M)
100.00%
AVG
Generic, Adware InstallCore.ABH
34.69%
VIPRE Antivirus
Threat.4786018, InstallCore
30.61%
Baidu Antivirus
Adware.Win32.InstallCore
26.53%
Dr.Web
Trojan.InstallCore.15, Trojan.InstallCore.510
26.53%
NANO AntiVirus
Riskware.Win32.InstallCore.dfgone
20.41%
ESET NOD32
Win32/InstallCore.SC potentially unwanted application, Win32/InstallCore.TR potentially unwanted application, Win32/InstallCore.TL potentially unwanted application
18.37%
ESET NOD32
Win32/InstallCore.QF (variant), Win32/InstallCore.RO (variant)
14.29%
K7 AntiVirus
Unwanted-Program , Trojan
14.29%
Comodo Security
Application.Win32.FriedCookie.CIRK, Application.Win32.InstallCore.AKO, Application.Win32.InstallCore.RO, Application.Win32.InstallCore.LK
14.29%
Sophos
PUA 'InstallCore ToDownload'
12.24%
G Data
Win32.Application.InstallCore.DI
12.24%
Avira AntiVirus
ADWARE/InstallCore.Gen7, APPL/InstallCo.ewbs, ADWARE/InstallCore.A.625
10.20%
Fortinet FortiGate
Riskware/InstallCore
6.12%
herdProtect (fuzzy)
a variant of 87aa7e5bed208dd33f93793bbb7d98df10042e8f, a variant of e3dff7948e1779f5f3471e82c066a439235feab1, a variant of c6294fbd667c66cb53b1613c4ebe797880ecb391
6.12%
The domain cdn.clickdownloadfiles.com has been seen to resolve to the following 30 IP addresses.
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 5, 2016
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 29, 2016
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 15, 2016
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 15, 2016
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 7, 2016
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 25, 2016
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 22, 2016
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 21, 2016
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 21, 2016
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
January 30, 2016
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
January 30, 2016
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
January 30, 2016
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
January 4, 2016
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
January 4, 2016
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
January 4, 2016
ec2-54-191-250-3.us-west-2.compute.amazonaws.com
October 13, 2015
ec2-54-218-9-198.us-west-2.compute.amazonaws.com
September 10, 2015
ec2-54-186-33-198.us-west-2.compute.amazonaws.com
June 19, 2015
ec2-54-200-107-209.us-west-2.compute.amazonaws.com
May 5, 2015
ec2-54-187-120-35.us-west-2.compute.amazonaws.com
November 29, 2014
ec2-54-68-221-84.us-west-2.compute.amazonaws.com
November 29, 2014
ec2-54-186-167-43.us-west-2.compute.amazonaws.com
November 17, 2014
Showing 30 of 30 IP Addresses
File downloads found at URLs served by cdn.clickdownloadfiles.com.
The following 50 files have been seen to comunicate with cdn.clickdownloadfiles.com in live environments.