The domain cdn.ppdownload.com registered by OutBrowse was initially registered in June of 2012 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Sherman Oaks, California within the United States which resides on the Unitas Global LLC network.
Registrar:
GODADDY.COM, LLC
Server location:
California, United States (US)
Create date:
Thursday, June 21, 2012
Expires date:
Tuesday, June 21, 2016
Updated date:
Monday, June 22, 2015
ASN:
AS4436 AS-NLAYER - nLayer Communications, Inc.
Google Safe Browsing:
unwanted
Scanner detections:
Detections (74% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.MultiplyROI.J, PUP.DealPly.C, PUP.ReSoft.J, PUP.Installer.BoxoreOU.P, PUP.Installer.Ask.L, PUP.ExentTechnologies.Q, PUP.ExentTechnologies.X, PUP.SpeedChecker.Optional.Installer.Meta (L), PUP.Systweak.ThePhone.Installer.Meta (L), PUP.Installer.MultiplyROI, PUP.OutBrowse.MultiplyROI.Bundler (M), PUP.Outbrowse.FreeTheMedia.Bundler (M), PUP.Outbrowse.Bundler, PUP.BundledOffer.Meta (L), PUP.Extent.Installer.Meta (L), PUP.Adknowledge.TINYINSTALLER.Installer (M), PUP.Solimba.Bechiro.Bundler (M), PUP.Outbrowse.Mixi.Bundler (M), PUP.OutBrowse.Multiply.Bundler (M)
80.95%
Dr.Web
Adware.Downware.1449, Adware.Shopper.348, Adware.Downware.1560, Adware.Downware.1353, Adware.Downware.1463, Adware.Downware.1661, Adware.Downware.1348, Adware.Downware.946, Threat.Undefined
47.62%
ESET NOD32
Win32/OutBrowse (variant), Win32/Toolbar.Linkury (variant), Win32/Bundled.Toolbar.Ask (variant), Win32/OpenInstall (variant)
38.10%
Malwarebytes
PUP.Optional.Smart, PUP.Optional.DealPly.A, PUP.Optional.Linkury.A, PUP.Optional.RegCleanerPro, PUP.Optional.SoftwareUpdate.A, PUP.Optional.OutBrowse, PUP.Optional.Conduit.A
35.71%
VIPRE Antivirus
OutBrowse, Adware.DealPly, Adware.Linkury, Trojan.Win32.Generic!SB.0, Boxore, Conduit, Threat.4784459
35.71%
McAfee
Artemis!EC741EAF65AD, Artemis!F9CD7F14B752, Artemis!DE89D8867F1E, Artemis!E44126593658, Artemis!148927801825, Artemis!20AEC94BF0E0, Artemis!80FAA40D1C05
23.81%
Trend Micro House Call
ADW_DEALPLY, TROJ_GEN.R0CBH07K213, Suspicious_GEN.F47V1107, TROJ_GEN.F47V1207, TROJ_GEN.F47V1208, Suspici.E68ADD8E, TROJ_GEN.F47V0929
23.81%
Bkav FE
W32.Clod69d.Trojan, W32.Clod344.Trojan, W32.Clodd0f.Trojan, W32.Cloda0c.Trojan, W32.Clod688.Trojan, W32.Clod99c.Trojan, W32.Clode7f.Trojan
16.67%
Comodo Security
Application.Win32.DealPly.~BHU, Application.Win32.Conduit.~A, Application.Win32.OutBrowse.D, Application.Win32.OutBrowse.~AGT
16.67%
Avira AntiVirus
TR/Trash.Gen, TR/Dropper.Gen, Adware/OutBrowse.M.1
16.67%
G Data
Adware.DealPly, Win32.Application.RegCleanPro, Win32.Trojan-Dropper.BoxoreInject, Gen:Variant.Graftor.149279, Win32.Application.SearchProtect
14.29%
avast!
Win32:DealPly-A [PUP], Win32:SmartBar-A [PUP], Win32:Malware-gen, Adware-gen [Adw], Other:PUP-gen [PUP], Win32:PUP-gen [PUP]
14.29%
Agnitum Outpost
Trojan.Injector, PUA.OutBrowse
11.90%
herdProtect (fuzzy)
a variant of 5f5ceb53e8592e2eea671649b3840f64120db4cd, a variant of 388f7bc8b833292f2cc9b89c0bec6a1396ea9caf, a variant of b7e9281446811ff2692daa566e1f0015c2a6e1ab
9.52%
Vba32 AntiVirus
Downloader.OutBrowse
9.52%
The domain cdn.ppdownload.com has been seen to resolve to the following 3 IP addresses.
192-124-232-198.static.unitasglobal.net
November 17, 2014
224-124-232-198.static.unitasglobal.net
February 7, 2014
File downloads found at URLs served by cdn.ppdownload.com.
Latest 30 of 154 download URLs
The following 60 files have been seen to comunicate with cdn.ppdownload.com in live environments.
URL:
http://cdn.ppdownload.com/
Web server:
NetDNA-cache/2.2