home

cdn.komputerswiatportal.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.komputerswiatportal.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Dublin City, Ireland (IE)

Create date:
Monday, April 28, 2014

Expires date:
Friday, April 28, 2017

Updated date:
Wednesday, March 30, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
komputerswiatportal.com

Whois:
3 komputerswiatportal.com records

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.Installer.RingierAxelSpringerPolskaSpzoo, PUP.installCore.RingierAxelSpringerPolskaSpzoo (M), PUP.installCore.RingierAxelSpringerPolskaspzoo (M), PUP.installCore.RingierA.Installer (M), PUP.installCore.RingierA (M), PUP.installCore (M), PUP.InstallCore.FC (M)
100.00%

VIPRE Antivirus
Threat.4150696
2.08%

ESET NOD32
Win32/InstallCore.WX potentially unwanted application
2.08%

Dr.Web
Trojan.Packed.30208
2.08%

Malwarebytes
PUP.Optional.Bundle
2.08%

K7 AntiVirus
Unwanted-Program
2.08%

Comodo Security
Application.Win32.InstallCore.AEK
2.08%

Avira AntiVirus
Adware/InstallCore.700120
2.08%

Baidu Antivirus
Adware.Win32.InstallCore
2.08%

AVG
Generic
2.08%

The domain cdn.komputerswiatportal.com has been seen to resolve to the following 43 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 2, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 15, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 15, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 11, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 25, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 19, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 19, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 5, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 5, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 12, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 12, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
December 17, 2015

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
December 17, 2015

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
December 17, 2015

52.24.62.64
ec2-52-24-62-64.us-west-2.compute.amazonaws.com
November 25, 2015

54.149.60.150
ec2-54-149-60-150.us-west-2.compute.amazonaws.com
November 25, 2015

54.148.75.228
ec2-54-148-75-228.us-west-2.compute.amazonaws.com
November 25, 2015

54.201.218.17
ec2-54-201-218-17.us-west-2.compute.amazonaws.com
July 1, 2015

 
Showing 30 of 43 IP Addresses

File downloads found at URLs served by cdn.komputerswiatportal.com.

1 / 68      (Adware)
http://cdn.komputerswiatportal.com/?ic_user_id=963  (easy 7-zip 0.1.2.exe)

1 / 68      (Adware)
http://cdn.komputerswiatportal.com/?ic_user_id=963&key=kA/7RtL5AeXyYfuhsexjDXmcQn22m 2bzFyyWHL/ctCr62SRb5Uu5159svvEirc2/AgKWHdgvZ8CJZqfeGOnsEIScsWGabbamwXphRs532DR5d9tqobR4pdKoBeOWdoCxSApNQSgrBW5Ll8T z08GuOhDHnyeN8XYUWaXtE1QblNbwCsvBczzuOyDAN2x0mtRsgmejiBFaQGADYxFK2xayOW90JR SRMnDC6szatVWa XXP1XuP7yc/P9ZmQw5Y0Msh9 6Lxw1E2i6r9r7qEx6/9GsEB Y/bZz/LLyDaDoukbuWWtFPmm1Dn3UxSOl3A0/MebZWUT2u6467sR3Na0w==&data=km xLdpzUdo2zOPM0p0jLSs4UF5 El8tce9JxCI4V64XSUy0O0yZ 2RYUspsibZwlJ3mG7TSNMr3Ukc/wLCoJNq89g0kjBl1KPBmSqSt/7KC0yD0u1CxvBhcgCteSNwaBnbQKPBUXTSHHafWHzjx44zpHBcVzswdAZepzosdnQgaDtZXryatBf90EXz7ooE1PAE0g8CVNYorcF1q4aaMohcH L0r4mycmO/KumQzvRLMgp/qIGACerFyweQEzZxFJ2dyKU/PuY7cR UZ Goc6zSakV7AvCHSii5 C7rJb61Mi2cJX3Z5TZeRVKQ0BjGLJFQhg0sbmE66ooPOaNHuv0fJBMZLnpClqysB44u0V6CrGhvWxRF8 UM0wxgoOtpeSl9rLgFaPlXuksNGtC3ZUM9pxbmhbzeBiuyk7oPjd8/sRWpuQ29PvbKKfkgNdbRDxDuu0HFYmKxtw2xwyj71490nH/93zKAsAJPbcyOni6wIavOJr/Ox2jPlzI3YhEscsewltkJRX70nCgcVXjRQfpWWdT/.../hESmRzd  (avast! free antivirus 2015 10.2.2218.942.exe)

1 / 68      (Adware)
http://cdn.komputerswiatportal.com/?ic_user_id=963&key=F6VUSTumw8dFv887LT14hs177wXNqv1SEXdXxxJb/M6zwjlK0tUSRxvzkqyIJzCuoLLU3fu2AhiNr7wESkvOAZht25e52cUQQIAwzo7gwyT1UScMT6DhiLeRtvo6Zf/ 2ptJXLtbF0YKiwbalnpJ9QtKIJrOfZF h897NA3vnb 8Df6pfQBbirj9az0W/gDNVbuFUWhZTDSdOp83gy3Hh0pYmaTkhdAujl/Sw6GUTu4wSJpoXUeumMK69N5PY6q773Wcf3jF7AK/VaeNqFfsmkHOdOPWEhHzrItucmO02HJyBcKo8CemS3WHzEaxQYh6Dym4FaNjMHD c4t56PLsjg==&data=kFOT/6hjicZdhK7399T66jKHVp9Sp2DGAfXuPGQ7PRASoG5p54VstUV7 SGQVsPT8JemhzHXz3CRZ2gkM5WWByH7d4rdLymHEfbLDX7PH 4rzzbOwhWqCxqEWP0soGBkL0gRI25jm1tA/Jg6JSItdbRSBrR0Jr2PlFlGq/v4aPSsBT21otPIIdJj79D0PpOxaeFwdVT3buouH4NsfdEZ5atYe5kH7ywJNkAGoDvxrPwYSSUlcGzdT9JqiCqJcxWBNVGp1Go6nIRCgq7hyvzZCty9anPtC4DmAojZpUFKlf9s56z54oJwkvhAxuDAAzcczJfFgXY pdt2HGpctFOdTV242CjOE4H8WyWK7cx6wHQStAsuymvYQdDr0NAqbDhSQjIpFJTV21XR6Tyh2ZYcklKukLfKMIJUQIKHXQ19JFCg7Ikn/5aFDja9E7Qn7A/gkMNh U7m4i2l00nmOoRQRNETq3eTiicfMWhKOlVoxEK xvwUwiIip RqLQV3ZuaxpMl48C3oRtbI5xlWdfoXMI6QQHDx3RbN36Hi7WSan3U13EHwVKFjXOxoQn8SQ/HH51iuHr/.../8JpwS  (kreator wizytówek 1.0.exe)

1 / 68      (Adware)
http://cdn.komputerswiatportal.com/?ic_user_id=963&key=h3AGatP6TO5SFx7LvlSnWSSoiGVnKObSVzb6n2LE/hO4MwpsukiYdtKOF uCDL77dQPU8KBzGNOKLl4DykHq6fIFOLMCqGAZZHhpUWkVh1XG1ZAY21QN43uw1Yr0SWu8gZ0qrPMgEigIRzfxvY6iOIwFarBXQaf2FrnN/RZFGHoX67tO9EPw9A82jGjXyiwzzfBZLFcWIET7Sb1jY/vpIt2cUQFdOUSvTMZgQTNxszQjtWDvY9vBpT72nSIunNWG0bAQQftZXmiZVumo1BL7SkKYlzJxE4Qvh3dziw0zO4pMqr444bzwdnfcrknP/41cIL02m02h shLlvy5zKw6GA==&data=FYuhTgo5dVQkW/qtvUsgUJT5MEOUtqgrPBNUVLUc375iZmqUd0Cqdn2LMj176UvAaCadvs79wiNvT2hsw1i 6qjmDaUdOojNqTyynl3CgM1CvX2BO/o4hqacDxtKqjIW/5xYCI1R9U3V4rxCBmIeqkMx6aXe3/ioaxoBkhX2IDzxD2QwKDzYP2iSQQYn7Vh7SpTfiaVXpUwcRJqEB3ggr2kgNQHblo0H4RuCT1nYdVFV7Rr0t2plKcD0BugSE90HCBBhsYTjjwds7RMC0/pJE2KsqBsJA8q5PEuqguUcePuwtsGXuqlvuMRtkC6BhzQVyVF78v1vJUBSM8yD7hRx4NMCFUv7fPfUVEUl1dGOO0Ib0nvjilTWxntGsvghgjA96FlOCjY1q UF92LBSdMdPVfVd9KJG71M3qRWTVYoOSO5LfTYw9felyegq4yZWV THcWxpYE rNwU8PfFrOWhRkl6cvV6ENXRwV0vL v LFZcB/.../pIsmATKOwXuXNUOoUz9R9AebylFsUvqsGORm3XXmqDhu8siEIbetSuWkFiKq8itIHLYQJCpAU1cA1chXnt  (minecraft 1.8.4.exe)

The following 51 files have been seen to comunicate with cdn.komputerswiatportal.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 101 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.