cdn.playgemollection.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain cdn.playgemollection.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in United, Pennsylvania within the United States which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Pennsylvania, United States (US)

Create date:
Sunday, May 17, 2015

Expires date:
Tuesday, May 17, 2016

Updated date:
Sunday, May 17, 2015

ASN:
AS60068 CDN77 Datacamp Limited,GB

Scanner detections:
Detections  (71% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PlayGem, Adware.Offer.Bundle.SLI.Meta (M), Adware.Bundle.SLI.Installer.Meta (M)
57.14%

Dr.Web
Adware.AppShake.1, Win32.Wplugin.2, Trojan.DownLoader16.22438
42.86%

Kaspersky
UDS:DangerousObject.Multi.Generic, Virus.Win32.Slugin
28.57%

ESET NOD32
Win32/Adware.Offtoup.A application, Win32/Slugin.A virus
28.57%

ESET NOD32
Win32/Adware.AppShake (variant)
14.29%

Fortinet FortiGate
PossibleThreat.VEX.90
14.29%

avast!
Win32:Patched-JI
14.29%

F-Prot
W32/Slugin.B
14.29%

Microsoft Security Essentials
Threat.Undefined
14.29%

McAfee
Trojan.Artemis!FAC1F5EEC6BC
14.29%

F-Secure
Win32.SlugIn.A
14.29%

Norman
Win32.SlugIn.A
14.29%

The domain cdn.playgemollection.com has been seen to resolve to the following 4 IP addresses.

atlanta-3.cdn77.com
April 15, 2016

atlanta-4.cdn77.com
April 6, 2016

new-york-2.cdn77.com
February 2, 2016

new-york-20.cdn77.com
January 4, 2016

File downloads found at URLs served by cdn.playgemollection.com.

2 / 68      (inconclusive)
http://cdn.playgemollection.com/.../PlayGem_v1_Setup.exe  (633cd63bb02ab9b34ff2c46d581526a5)

1 / 68      (PUP)

1 / 68      (PUP)

9 / 68      (PUP)

2 / 68      (PUP)

2 / 68      (PUP)

2 / 68      (inconclusive)

The following 11 files have been seen to comunicate with cdn.playgemollection.com in live environments.

URL:
http://cdn.playgemollection.com/

Title:
“Your Push Zone has been created.”

Web server:
CDN77-Turbo