home

cdn.mp3rocketcontents.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.mp3rocketcontents.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Monday, March 23, 2015

Expires date:
Thursday, March 23, 2017

Updated date:
Sunday, February 21, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
mp3rocketcontents.com

Whois:
2 mp3rocketcontents.com records

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.Installer, Win32.Generic.SCCE.Installer.Meta, PUP.installCore.MP3TechSupport.Installer (M), PUP.InstallCore.EST (M), PUP.InstallCore.RES (M)
91.67%

Baidu Antivirus
Adware.Win32.InstallCore, Adware.Win32.OpenCandy
66.67%

McAfee
Artemis!116FFA881424, Artemis!74B4D543094C, Artemis!09672008FF00, Artemis!433959388623, Artemis!656DB5947E49
50.00%

Trend Micro House Call
Suspicious_GEN.F47V0326, Suspicious_GEN.F47V0331, Suspicious_GEN.F47V0418, Suspicious_GEN.F47V0413
50.00%

ESET NOD32
Win32/InstallCore.YK potentially unwanted (variant), Win32/InstallCore.YV potentially unwanted (variant), Win32/OpenCandy.A potentially unsafe (variant), Win32/OpenCandy.E potentially unsafe (variant)
50.00%

G Data
Win32.Trojan.Agent.L6E91A, Win32.Application.Agent.TL78XI, Win32.Trojan.Agent.95WKEY, Win32.Trojan.Agent.VBPX6B
41.67%

Bkav FE
W32.HfsAdware
41.67%

Fortinet FortiGate
Riskware/InstallCore, Riskware/OpenCandy
41.67%

VIPRE Antivirus
Threat.4150696, Opencandy, Trojan.Win32.Generic
41.67%

Dr.Web
Adware.OpenCandy.155, Adware.OpenCandy.171, Trojan.InstallCore.1903
41.67%

avast!
Win32:Malware-gen
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

Comodo Security
Application.Win32.InstallCore.DSE, Application.Win32.InstallCore.RO
25.00%

Sophos
Generic PUA AM, Generic PUA JB
25.00%

ESET NOD32
Win32/InstallCore.YL potentially unwanted application, Win32/OpenCandy.A potentially unsafe application, Win32/InstallCore.ADX.gen potentially unwanted application
25.00%

The domain cdn.mp3rocketcontents.com has been seen to resolve to the following 18 IP addresses.

52.43.243.228
ec2-52-43-243-228.us-west-2.compute.amazonaws.com
August 30, 2016

52.39.140.133
ec2-52-39-140-133.us-west-2.compute.amazonaws.com
August 29, 2016

52.10.85.80
ec2-52-10-85-80.us-west-2.compute.amazonaws.com
July 20, 2016

54.200.150.105
ec2-54-200-150-105.us-west-2.compute.amazonaws.com
July 3, 2016

54.148.219.152
ec2-54-148-219-152.us-west-2.compute.amazonaws.com
June 28, 2016

54.148.241.40
ec2-54-148-241-40.us-west-2.compute.amazonaws.com
May 25, 2016

52.34.254.156
ec2-52-34-254-156.us-west-2.compute.amazonaws.com
May 25, 2016

52.35.246.224
ec2-52-35-246-224.us-west-2.compute.amazonaws.com
May 18, 2016

52.25.167.148
ec2-52-25-167-148.us-west-2.compute.amazonaws.com
May 16, 2016

52.10.47.132
ec2-52-10-47-132.us-west-2.compute.amazonaws.com
May 15, 2016

54.191.197.143
ec2-54-191-197-143.us-west-2.compute.amazonaws.com
April 13, 2016

52.35.220.181
ec2-52-35-220-181.us-west-2.compute.amazonaws.com
April 5, 2016

52.89.243.234
ec2-52-89-243-234.us-west-2.compute.amazonaws.com
February 21, 2016

52.10.249.85
ec2-52-10-249-85.us-west-2.compute.amazonaws.com
February 18, 2016

54.200.215.92
ec2-54-200-215-92.us-west-2.compute.amazonaws.com
January 6, 2016

52.26.157.183
ec2-52-26-157-183.us-west-2.compute.amazonaws.com
January 4, 2016

54.213.89.151
ec2-54-213-89-151.us-west-2.compute.amazonaws.com
June 18, 2015

52.10.245.247
ec2-52-10-245-247.us-west-2.compute.amazonaws.com
May 15, 2015

File downloads found at URLs served by cdn.mp3rocketcontents.com.

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=mD3CJglne8xEWEmSRuaLbm6OusPznrMXDz1e8XKgPdk=&c=3H10J1rqykyPXbj iT4IBUgHNxPawIeEuzXStslCeY7m4wR6W6IoV7uniFG6tIYSmQ3ckByv4ZirwVyDa7qOyA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

1 / 68      (PUP)
http://cdn.mp3rocketcontents.com/c?x=xzEAC9u3o2Q/lk/ifE DlQlJc3YG22qiGqycD2qi6qI=&c=DCSH2MVWfJ D4anlk4z8q44F2AA89JVo8BDn3iG67aFHYpjUTqlm2itmyB8/vV2isElhodl9PtTTCze4xEt mQ==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (d7ea5293b8c8f568a7b7208026140fc2)

9 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=UQYHacnIYyDMhYpaf0ZBgzhSgoSGG9KuBNpWLOhYM0E=&c=OY1NizHBX4KHI1OIxGbnfIU219ZntpKFZm4Jfwju7ciprrdjCtfZihnLS80Rl//faLJpa4e8UO6zirH/i04xkw==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (b920084f933f47ef8b6eccaf09fe83fe)

3 / 68      (PUP)
http://cdn.mp3rocketcontents.com/c?x=4dkwmkXqdQiBTH/eHsf kpG FTX Rm8fgF/s2BWPsSQ=&c=m8O0shF0c0okxoon062wG0U0jdyha8G0VWkCqMwqqGhfpE B9SjNOXnwy h1FX8kXeQqeSI5HG3N32qLasgFng==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (3fbdb33dad06e0e37d8e045325359f71)

11 / 68    (Adware)
http://cdn.mp3rocketcontents.com/c?x=dA31lVsIzTP8uhGumwIU6/xVlDUM7/7rshGwY zUrw8=&c=s3Z MdWyOTBa69UyU0Gyyiz/W046m0zaCnW4NQSvrYATfvZf90CravsR5no9ewR WjpcsWuQsY8VLwt444UhEA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (mp3 rocket.exe)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=yfcPQSAGUg/q35iYcJMOjl7kXbJRTXDUd8NIdQ/HCSM=&c=LK3MnRxo76F rtP/KHf4LC dUIWQCOVmzECx7ltqZB4fg/Ixl6A/dGgrfA1 yr2KWrQsbA5riRYaWB0GLlGF5g==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

9 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=8pDciA wMxb76DSVGYj/E6xcU ZXNDY jdhd95DySEg=&c= f7BlmRT911cRUqP/K5cKMsR7Gksq9VcBz3wQZhYOI5oOnND3NeNdnZ/wTbW CEkzGMvxjqjE1mXJHgSZikssw==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (b920084f933f47ef8b6eccaf09fe83fe)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=Qg0p SF5k1n/V9CWyUuyZ37iFWQHSnSj39O6BJpRDHo=&c=Bch255VAjOqAJlKTTdzpqZZZ5Lko1rlfzDAC2u90X8hlYzf ugP7LG2 rZNF/ncBN3c6WTHZXXEY2xKWQBGpwg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

2 / 68      (false positives)
http://cdn.mp3rocketcontents.com/c?x=2yBrYPQQoqkmGHMfHZRibA3iOr6Mjw/cL2ZOO5MZl7E=&c=FasGvg1jAYNgFz71cFXVV28RJhXnXYwp0woU3fYwXV1PO1hZKp4V8sBXR0qMaNPeilPuqDVhoSomFmSjpC ElQ==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (wrar420.exe)

11 / 68    (PUP)
http://cdn.mp3rocketcontents.com/c?x=ycQ8JnHsu2PQ0n58KrWZHkE4K/plUHSM1NStvo31FSo=&c=wjG IE4iU6pqSWeowfRXkPpLgkttzBmeQRzo/ljsgSsqouK8VtgDL95c/YR4lMfBVDbTp7iHuhyU qQVSQ/1yg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (a7ec2e9e0900ba2386ed066c419056d2)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=c9iz2roOe7OYuZOn9Z5HwFgbkt0VQkXvmpiRxHtJiOs=&c=XX FW59Rjcc/7CFxul6P0FHq8LYtU6QSWBQ/zoEKcyh//9YHJUaLbGFeXc/Gm1vtvyGlaYyEssr2kQmQ/E0uZg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

9 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=fO16YRHze74 337KnubPw0NhVcLNcSpGkobpTdJG144=&c=uQbeBVSVSEC9khWxUJfTiEbV/Dg8Hz49n55ABetvptPumLqLT0Kip L1FbnnDg sWyTnJ3zst3Ad9mLvkQCLQA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (b920084f933f47ef8b6eccaf09fe83fe)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=mj7ep/YXJWOFljlFiDjTn7Cll17X2xlgDRWUEfJTWZQ=&c=uGWdkCftSf5NE5yJIyOZGYKAsTvxPDyV9x9SAeLYTUqmjmmv60ZL3zz2enNpCMlxrW98feO6payuZ4/N1M YCA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

10 / 68    (Adware)
http://cdn.mp3rocketcontents.com/c?x=/WNWTBZxnMZOpM3AoVeDz9lNHleTXU1BnZ4ERpZPDKo=&c=yFW3fG Znm5kqStLD5InvgAM8vJF9NAuizIKdb00nsCYhQWe/f0rMg4h8hOXxGu6MmQQWG1ePxt6103dNVwTqQ==&downloadAs=mp3rocket.exe&fallback_url=http://www.mp3rocket.me/.../mp3rocket.exe  (ee5e35ddb58d1f2fdbc1afc89ddc14e6)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=ChRz9rDbHZBB11qQzgdZJNoN4R/gmETIXxoGkBShNxg=&c=N0uF8staXVQkokjFN9L8uyiMVnKHbVXTPB8WvhiFJl38vbMJhZqJF7BQDZl zY9KjvYf sJSu8dhEf3946uVYg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

19 / 68    (PUP)
http://cdn.mp3rocketcontents.com/c?x=aQcHZuPgGAA7p36 x oPmvDQgDEUZIGeLw5dq4By0cM=&c=VTVRG6DsVsSsvl60exe1FY yHxE2exU40Mc6CNMKNWWRqm3GsX7RwaywUPsgFVMBf4z5PQ9P0c0DdRsYsp3W1Q==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (09672008ff00a56471d5c5f6263a288d)

20 / 68    (PUP)
http://cdn.mp3rocketcontents.com/c?x=ovAxkK4uwi0PRaOuiTAwdUSPmEVv9GBLXPnnthXPz3Q=&c=TqompcWiUN2oIRD7MJnCdInslGmVexJd0QqROr16j8Xn8Oa OrxGUoMj LKdrdl1sS9AmXjEc5Y8vIZ7oavzQQ==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (c24c862d4c6d802b18155a5a185f9fc9)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=UG/2cW0tmcnRn0/zooaKXNliXHXS8k1O3dAf8Pc/qfg=&c=hxuOCMqfWvP0eYgkS BppkWZEkQSS3CSBkZpfr0dpnuyCNFZM/zjziLunv1LxrT1wbu9r0OFJ2DzKeVfpFHkVg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

9 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=zt2QNLN4O/wg8M5nAKPFk gOvgFd FL4YCLDBqZUTk=&c=O2N G0wBRgnRobgx9KNxPAObSKtU5NxMP2PqwxSz8lE32zJse6tGwD 3pTggO4HDk27DkxJTCMZ9410UVKms1Q==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (b920084f933f47ef8b6eccaf09fe83fe)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=I8I/FUFYcVRhclOa4wFKZx9Lhsa9uOjm6BNS lfZCBw=&c=CKt PtLPapKJT0U6w0O9tKXn6MiewU/ Fe 3h9pBB31BMnNGfzjobAnNLlf9ERPEPRVbTj2R2dfdfyQuUIOQeQ==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

9 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=DZiktyBemSxYwVKfwkMOnLNwRKebngfE0Tdtwgycz2A=&c=EfH7GUGIuM7IYFF 5JSbFxPectufhLlNu6to91CG Agw NnLTwKHjrzRl5HUqQLosEBpYbQx6hAiXIUJgCorwA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (b920084f933f47ef8b6eccaf09fe83fe)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=J/oQWNVTOFHsAFJ8dltmL/wAlz0zYjo8t bDZfnahiQ=&c=wrFreETvZNIYMiZwXLlnc5Nc5yJNI0gCj6A0AeJpBo0cj/JxCEjb3FlN6T8PcRvIDJu7xxaV2YtwLgDSN82bvw==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=MfcLzngLjIX9X JZVObR6TUayD2iL9mlZPB vdFNE8c=&c=lpQUHv/y7uBKQbNiA2PNwSYlJO6 NcwtXz u6B RDI3z/NjRWFCd3mbvlNrk4V1Gv3LDGYB6ZSy2OTx TSj/JQ==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

9 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=bgH9AebxmWBvXrCaan3e s45CuIv03CO4qmfZ0SHUnU=&c=4YjDEZHAACSDJqa6EHByIEQeRDRjMbmSu4ZTXPlBldjaaol97ISLo3FWxIsDLRAYVt/jiBu/OTTIl/5yUfoURg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (b920084f933f47ef8b6eccaf09fe83fe)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=0y5wXRVcZdYW0aMggwA8jMrjX6eSG5Y l0AcCXc0BWQ=&c=ygx7cExUj9hE9Uv8n4MaJCijFK5smjYNeuggsvksfYfCSlHh eXPeEnUOrT0MGuBMgHP888vtVgq7eCOgtFmzA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

11 / 68    (Adware)
http://cdn.mp3rocketcontents.com/c?x=JlXIDKrqglDm83ZTFPZi ZDgyxM2e7ZKlp8Yg5uPsc=&c=xo9K8fxfQA NeudBgUtIBHF5yTY5x/umV0ZGqE1zWskOi4mzBKxVlvXRoEifHaCHMYsl24Xy6Kf/BQaoYJLFwg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (74b4d543094c6d963afbdc6c51543e4a)

11 / 68    (Adware)
http://cdn.mp3rocketcontents.com/c?x=7Ix95ke6nceka05lnOpNrEA37wsyluvD9 o71nswJg=&c=nwQoOc0aCv/3uFXN3fvbbzwLfDOU9Rel3KChwJrRdt6WkZ2dV8uRuSWuaQuUiSasBJG6OTfPxs/KEjNQgQ2GvA==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (74b4d543094c6d963afbdc6c51543e4a)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=ruo5t2pnY2xfzAxNvetT7TFwmtBbEerIM5asu4pfDko=&c=KH54E5xR5lrU/aVytyCOPKOVqeoR8J1llV dN8lm/38L5kMfPkSZvJ zviZ6iMLwddCKuQdFJGHvPYN73DhjSg==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

11 / 68    (Adware)
http://cdn.mp3rocketcontents.com/c?x=jD0 jp69L/UfXb JD9zVhTT/tq1DKflRY9spLYQvRMU=&c=ZnBgzW0 Yqcwd/3dm0riCBg8KL01xKGmgV9eRjcZ1KOfU9gFYjS4VKAsAZX1Zdw0b0xTXa624tUCg8azMHwx8Q==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (74b4d543094c6d963afbdc6c51543e4a)

6 / 68      (Adware)
http://cdn.mp3rocketcontents.com/c?x=cRcuuGJJPtkAR7cd2WsSIyjeRsuEOfHIJPgKEzz8xJk=&c=R lEiFzWVImSafDm47ZfNLzMf kBS84GXQXHgQiHJh5qszdgfWwfvVwC3KMd8Fps7Uaomjhpi3VvMyIVKBs pw==&downloadAs=mp3rocket.exe&fallback_url=http://.../mp3rocket_is.exe  (21deb40c24fe600a16485758b0e32e94)

 
Latest 30 of 40 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.