home

cdn.sparktrust.com

Paretologic Inc.

Domain Information

The domain cdn.sparktrust.com registered by SparkTrust Systems Inc was initially registered in July of 2010 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below). The domain is associated with the publisher Paretologic Inc. who is located in Victoria, British Columbia in Canada.
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Wednesday, July 7, 2010

Expires date:
Thursday, July 7, 2016

Updated date:
Wednesday, July 8, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
sparktrust.com

Whois:
1 sparktrust.com record

Scanner detections:
Detections  (60% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SparkTrust.Installer.Meta (L)
75.00%

ESET NOD32
Win32/Adware.SpeedingUpMyPC.AV application
25.00%

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
25.00%

The domain cdn.sparktrust.com has been seen to resolve to the following 39 IP addresses.

52.84.125.22
server-52-84-125-22.iad16.r.cloudfront.net
August 29, 2016

52.84.125.5
server-52-84-125-5.iad16.r.cloudfront.net
August 29, 2016

52.84.125.216
server-52-84-125-216.iad16.r.cloudfront.net
August 29, 2016

52.84.125.210
server-52-84-125-210.iad16.r.cloudfront.net
August 29, 2016

52.84.125.206
server-52-84-125-206.iad16.r.cloudfront.net
August 29, 2016

52.84.125.146
server-52-84-125-146.iad16.r.cloudfront.net
August 29, 2016

52.84.125.114
server-52-84-125-114.iad16.r.cloudfront.net
August 29, 2016

52.84.125.94
server-52-84-125-94.iad16.r.cloudfront.net
August 29, 2016

52.84.125.221
server-52-84-125-221.iad16.r.cloudfront.net
July 20, 2016

52.84.125.105
server-52-84-125-105.iad16.r.cloudfront.net
July 20, 2016

52.84.125.102
server-52-84-125-102.iad16.r.cloudfront.net
July 20, 2016

52.84.125.37
server-52-84-125-37.iad16.r.cloudfront.net
July 20, 2016

52.84.125.14
server-52-84-125-14.iad16.r.cloudfront.net
July 20, 2016

52.84.125.242
server-52-84-125-242.iad16.r.cloudfront.net
July 20, 2016

52.84.125.239
server-52-84-125-239.iad16.r.cloudfront.net
July 20, 2016

52.84.125.238
server-52-84-125-238.iad16.r.cloudfront.net
July 20, 2016

52.85.131.202
server-52-85-131-202.iad53.r.cloudfront.net
July 17, 2016

52.85.131.181
server-52-85-131-181.iad53.r.cloudfront.net
July 17, 2016

52.85.131.161
server-52-85-131-161.iad53.r.cloudfront.net
July 17, 2016

52.85.131.137
server-52-85-131-137.iad53.r.cloudfront.net
July 17, 2016

52.85.131.120
server-52-85-131-120.iad53.r.cloudfront.net
July 17, 2016

52.85.131.104
server-52-85-131-104.iad53.r.cloudfront.net
July 17, 2016

52.85.131.56
server-52-85-131-56.iad53.r.cloudfront.net
July 17, 2016

54.192.19.125
server-54-192-19-125.iad12.r.cloudfront.net
July 4, 2016

54.192.19.118
server-54-192-19-118.iad12.r.cloudfront.net
July 4, 2016

54.192.19.73
server-54-192-19-73.iad12.r.cloudfront.net
July 4, 2016

54.192.19.49
server-54-192-19-49.iad12.r.cloudfront.net
July 4, 2016

54.192.19.37
server-54-192-19-37.iad12.r.cloudfront.net
July 4, 2016

54.192.19.172
server-54-192-19-172.iad12.r.cloudfront.net
July 4, 2016

54.192.19.153
server-54-192-19-153.iad12.r.cloudfront.net
July 4, 2016

 
Showing 30 of 39 IP Addresses

File downloads found at URLs served by cdn.sparktrust.com.

1 / 68      (PUP)
http://cdn.sparktrust.com/sparktrust/pccleanerplus/.../SparkTrust PC Cleaner Plus Setup.exe  (sparktrust pc cleaner plus setup_0fcb5e61-f825-4695-aefa-d20ed05cd71e_.exe)

0 / 68
http://cdn.sparktrust.com/sparktrust/.../SparkTrust PC Cleaner Plus Setup.exe  (dl-sparktrust pc cleaner plus downloader_2a417cd5-8ec4-46e1-bfa6-e4e174e74cbd_.exe)

1 / 68      (PUP)
http://cdn.sparktrust.com/sparktrust/pccleanerplus/.../SparkTrust PC Cleaner Plus Setup.exe  (sparktrust pc cleaner plus setup_f5889b51-9cb7-4056-9052-b76403946fe0_.exe)

2 / 68
http://cdn.sparktrust.com/sparktrust/.../SparkTrust Driver Updater Setup.exe  (e4cc2fd16d47be1f10646a0ee6f5e975)

1 / 68      (PUP)
http://cdn.sparktrust.com/sparktrust/pccleanerplus/.../SparkTrust PC Cleaner Plus Setup.exe  (sparktrust pc cleaner plus setup_91b2650b-2ac2-4431-9fb2-ca3c909d7400_.exe)

The following 143 files have been seen to comunicate with cdn.sparktrust.com in live environments.

TCP » 54.192.19.125:80
saber.exe

TCP » 54.192.19.73:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.146:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.94:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.142:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.37:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.142:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.73:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.19.142:80
saber.exe

TCP » 54.192.19.172:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.239:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.192.19.142:80
saber.exe

TCP » 54.192.19.172:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.125:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.206:80
se.exe

TCP » 54.192.19.125:80
saber.exe

TCP » 54.192.19.37:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.14:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.216:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.242:443
browserairexec.exe (BrowserAir by Goobzo)

 
Latest 20 of 230 files

URL:
http://cdn.sparktrust.com/

Network:
Amazon Cloudfront

Web server:
CloudFront

paretologic.com

filecure.com

regcure.com

xoftspy.net

speedypc.com

speedybackup.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.