home

cdn.rsparkcontent.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.rsparkcontent.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in July of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Thursday, July 17, 2014

Expires date:
Sunday, July 17, 2016

Updated date:
Sunday, June 28, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
rsparkcontent.com

Whois:
1 rsparkcontent.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer (M), PUP.InstallCore.11 (M), PUP.InstallCore.EST (M), PUP.InstallCore.RE11 (M)
100.00%

ESET NOD32
Win32/InstallCore.ACY.gen potentially unwanted application
20.00%

The domain cdn.rsparkcontent.com has been seen to resolve to the following 9 IP addresses.

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 10, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 10, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 10, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 10, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 10, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 10, 2016

File downloads found at URLs served by cdn.rsparkcontent.com.

1 / 68      (PUP)
http://cdn.rsparkcontent.com/?data=E0cQh2ZGtVUStKoe83ZQPbWQhhjp1uHaQZqOVLUw/I3He VtM/nUSehkQ2lGP0VfhUDSSqiCeA5W4iDl56QF2YpoGKk/aPDKOjOGXYoaA8N/vdocaAJuBWaj0QvvN/facACEp0z F6RbRjReKcenMwfMx1gfsoG04aI2Fx6muwC6Tc90h OobeiOXVkE10faVDGOuUuVZQ3YK1s8uDRLqv86AByZ2wtX5mM8emQmaciVLTLHwRqDwBr/YeZ3m TUKeZ5stFksMzRnY/YPjHu4T4sPcP6P3AF5jMPCfH1UB8NJ8qILKdh/wBjOFuc daouSOzS7tRNqaNUKD1dPdBXJCMNipYuOQdJbPU SFgFMLK3Ewrbt zJwwMqd/3HV0eXBMpJNb3cN S0HkHGFobGqd61fMQ9WVmKfkNnLKv1r21LZHMKyNHB6GUcLxCRCoOY6APW tY1L9uj/ea6kp7e2RFa9XySxlb68JlIAOMQ/z2M1JaZD7s3KHckbNffXLKZkCMl70=&key=UNiSX2gZzhR3/kquXif2 DI/F13BY2s1LqbwhI0d7BiFMxxVwJerBH5EoZE DWzMK5Pte/ 3g1c tk1mtpyvt/daYbZsn3CIWE829ApPqb/2rbMOAJpjDvS0bhHyHu3j2pGTrhaDsE04TIC7kiIrhUHcNj88Iq XRMk8USOZ18/CmP6BmrKv29ogmXAEfSP0HYqlKjZK6rjZtylJe9U7vVNNYYfrKinm3VeDdv4UvkFTNfyCuGY4H12c8RUvunMgcbKKsLVfWhozbZ9NGBaKnXbmLvqEbhCUVUpMT6FcA7vzqIAakWNnk48yUV7c/.../JkmFNV3 6nlCVxV1Nt9OYg==&ic_user_id=225&js_version=0.1&fallback_url=fallback_url&downloadAs=pdfunlocker_setup.exe&  (0a58f561ead368163650d1b28372d533)

1 / 68      (Adware)
http://cdn.rsparkcontent.com/?data=jI6bjdJwckDIVnDfLF8wqlK/6i/O7eP Vkak5XBFw5uFTMgY4JSuhp6Z0OgwYbQa3NDqONE0K1lOxDIG HXpRfJ6NUEqmaheMcw67Kwdc3kKYoTUFc1rlx vWp43WFkmNH6mo60Oc6v/Vib2W6S VjeGlKSkcpp37MiwGwgBSqIWJy83NOvlv3kSB4stFIpKp0LW5iF/MrL6tpPjsgrGDXoOARKjKIhCn7UMHMmDPiBhkPkt4j7Uzu2lN9FIiyXxhTWiWhF pu87gihstlE1FPz6lhKoyJTyhy44jpUK4Sndhp4pam4jIDy0zdHazE8X7ak02PcQYKAEO7FGPpI 9YO15xyE7OkN5Vl DGUJrpJWmYFL1tCqHNppXh0dMu0s3DrtBDh8dXtvOykkYB7XW0LULkfbYMSFm9lcdnowLe5puHxv4b1bn p7sdZcWwjqcB diZYmwCl/7fsqqW9bKEMJtey5woT9o1r1udQJSKNHecSm/BgAALP8rZqD6Fsfkip7U7dHDdz9wDykr FsiACENaRDCspEIZ43bmk=&key=ERzbdWCqrde34r5CtsLho/Xo7kvXaIRrKWGgBswR1l659DbgxREjpDcx7c2oCkZJQJdv74qZlK8P8EEqmE6iPglgYzyzG8qTSShkfdzK2I/nQeD2umiepPL1eFEeuaem7KpKg36Vt0pn0gTnsqfTuIt9rpEagSgEgC983zpCTira3vwX/PvR2upSGmCce9zcxgq1afqNkf2t76DpmvFrY9JSHlIHi6BGrhxOAaiM8trQDxe/GqRluiCt28PlwBjSSKS50LwZn7viQMUM/.../ySZjppHsktOaPGe4egeS7Fx5nTejCmHOUFMEPFVG95SKvQ==&ic_user_id=225&js_version=0.1&fallback_url=fallback_url&downloa  (icreinstall_epubreader_setup.exe)

1 / 68      (PUP)
http://cdn.rsparkcontent.com/?data=jI6bjdJwckDIVnDfLF8wqlK/6i/O7eP Vkak5XBFw5uFTMgY4JSuhp6Z0OgwYbQa3NDqONE0K1lOxDIG HXpRfJ6NUEqmaheMcw67Kwdc3kKYoTUFc1rlx vWp43WFkmNH6mo60Oc6v/Vib2W6S VjeGlKSkcpp37MiwGwgBSqIWJy83NOvlv3kSB4stFIpKp0LW5iF/MrL6tpPjsgrGDXoOARKjKIhCn7UMHMmDPiBhkPkt4j7Uzu2lN9FIiyXxhTWiWhF pu87gihstlE1FPz6lhKoyJTyhy44jpUK4Sndhp4pam4jIDy0zdHazE8X7ak02PcQYKAEO7FGPpI 9YO15xyE7OkN5Vl DGUJrpJWmYFL1tCqHNppXh0dMu0s3DrtBDh8dXtvOykkYB7XW0LULkfbYMSFm9lcdnowLe5puHxv4b1bn p7sdZcWwjqcB diZYmwCl/7fsqqW9bKEMJtey5woT9o1r1udQJSKNHecSm/BgAALP8rZqD6Fsfkip7U7dHDdz9wDykr FsiACENaRDCspEIZ43bmk=&key=ERzbdWCqrde34r5CtsLho/Xo7kvXaIRrKWGgBswR1l659DbgxREjpDcx7c2oCkZJQJdv74qZlK8P8EEqmE6iPglgYzyzG8qTSShkfdzK2I/nQeD2umiepPL1eFEeuaem7KpKg36Vt0pn0gTnsqfTuIt9rpEagSgEgC983zpCTira3vwX/PvR2upSGmCce9zcxgq1afqNkf2t76DpmvFrY9JSHlIHi6BGrhxOAaiM8trQDxe/GqRluiCt28PlwBjSSKS50LwZn7viQMUM/.../ySZjppHsktOaPGe4egeS7Fx5nTejCmHOUFMEPFVG95SKvQ==&ic_user_id=225&js_version=0.1&fallback_url=fallback_url&downloa  (epubreader_setup.exe)

2 / 68      (PUP)
http://cdn.rsparkcontent.com/?data=jI6bjdJwckDIVnDfLF8wqlK/6i/O7eP Vkak5XBFw5uFTMgY4JSuhp6Z0OgwYbQa3NDqONE0K1lOxDIG HXpRfJ6NUEqmaheMcw67Kwdc3kKYoTUFc1rlx vWp43WFkmNH6mo60Oc6v/Vib2W6S VjeGlKSkcpp37MiwGwgBSqIWJy83NOvlv3kSB4stFIpKp0LW5iF/MrL6tpPjsgrGDXoOARKjKIhCn7UMHMmDPiBhkPkt4j7Uzu2lN9FIiyXxhTWiWhF pu87gihstlE1FPz6lhKoyJTyhy44jpUK4Sndhp4pam4jIDy0zdHazE8X7ak02PcQYKAEO7FGPpI 9YO15xyE7OkN5Vl DGUJrpJWmYFL1tCqHNppXh0dMu0s3DrtBDh8dXtvOykkYB7XW0LULkfbYMSFm9lcdnowLe5puHxv4b1bn p7sdZcWwjqcB diZYmwCl/7fsqqW9bKEMJtey5woT9o1r1udQJSKNHecSm/BgAALP8rZqD6Fsfkip7U7dHDdz9wDykr FsiACENaRDCspEIZ43bmk=&key=ERzbdWCqrde34r5CtsLho/Xo7kvXaIRrKWGgBswR1l659DbgxREjpDcx7c2oCkZJQJdv74qZlK8P8EEqmE6iPglgYzyzG8qTSShkfdzK2I/nQeD2umiepPL1eFEeuaem7KpKg36Vt0pn0gTnsqfTuIt9rpEagSgEgC983zpCTira3vwX/PvR2upSGmCce9zcxgq1afqNkf2t76DpmvFrY9JSHlIHi6BGrhxOAaiM8trQDxe/GqRluiCt28PlwBjSSKS50LwZn7viQMUM/.../ySZjppHsktOaPGe4egeS7Fx5nTejCmHOUFMEPFVG95SKvQ==&ic_user_id=225&js_version=0.1&fallback_url=fallback_url&downloa  (epubreader_setup.exe)

1 / 68      (PUP)
http://cdn.rsparkcontent.com/?data=jI6bjdJwckDIVnDfLF8wqlK/6i/O7eP Vkak5XBFw5uFTMgY4JSuhp6Z0OgwYbQa3NDqONE0K1lOxDIG HXpRfJ6NUEqmaheMcw67Kwdc3kKYoTUFc1rlx vWp43WFkmNH6mo60Oc6v/Vib2W6S VjeGlKSkcpp37MiwGwgBSqIWJy83NOvlv3kSB4stFIpKp0LW5iF/MrL6tpPjsgrGDXoOARKjKIhCn7UMHMmDPiBhkPkt4j7Uzu2lN9FIiyXxhTWiWhF pu87gihstlE1FPz6lhKoyJTyhy44jpUK4Sndhp4pam4jIDy0zdHazE8X7ak02PcQYKAEO7FGPpI 9YO15xyE7OkN5Vl DGUJrpJWmYFL1tCqHNppXh0dMu0s3DrtBDh8dXtvOykkYB7XW0LULkfbYMSFm9lcdnowLe5puHxv4b1bn p7sdZcWwjqcB diZYmwCl/7fsqqW9bKEMJtey5woT9o1r1udQJSKNHecSm/BgAALP8rZqD6Fsfkip7U7dHDdz9wDykr FsiACENaRDCspEIZ43bmk=&key=ERzbdWCqrde34r5CtsLho/Xo7kvXaIRrKWGgBswR1l659DbgxREjpDcx7c2oCkZJQJdv74qZlK8P8EEqmE6iPglgYzyzG8qTSShkfdzK2I/nQeD2umiepPL1eFEeuaem7KpKg36Vt0pn0gTnsqfTuIt9rpEagSgEgC983zpCTira3vwX/PvR2upSGmCce9zcxgq1afqNkf2t76DpmvFrY9JSHlIHi6BGrhxOAaiM8trQDxe/GqRluiCt28PlwBjSSKS50LwZn7viQMUM/.../ySZjppHsktOaPGe4egeS7Fx5nTejCmHOUFMEPFVG95SKvQ==&ic_user_id=225&js_version=0.1&fallback_url=fallback_url&downloa  (epubreader_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.