cdn.winzipdelivery.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.winzipdelivery.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Dublin City, Ireland (IE)

Create date:
Thursday, May 22, 2014

Expires date:
Monday, May 22, 2017

Updated date:
Sunday, May 1, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (74% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), PUP.InstallCore (M), PUP.Bundler.InstallCore, PUP.OpenCandy (M), PUP.InstallCore.ENG (M)
62.50%

ESET NOD32
Win32/InstallCore.YR potentially unwanted (variant), Win32/InstallCore.ZH potentially unwanted (variant), Win32/InstallCore.ACZ potentially unwanted (variant)
43.75%

Bkav FE
W32.HfsAdware
43.75%

Trend Micro House Call
Suspicious_GEN.F47V0312, Suspicious_GEN.F47V0402, Suspicious_GEN.F47V0430, Suspicious_GEN.F47V0602
37.50%

NANO AntiVirus
Riskware.Win32.InstallCore.dqvwsp, Riskware.Win32.InstallCore.dqvwuk, Riskware.Win32.InstallCore.dfgmhs
37.50%

Dr.Web
Trojan.InstallCore.402, Trojan.InstallCore.530, Trojan.InstallCore.677
37.50%

Fortinet FortiGate
Riskware/InstallCore
31.25%

herdProtect (fuzzy)
a variant of 1ff5b1e47659afdb72ce354852fd3ba1f4a488a9, a variant of 7dd6b86bdfb4dbe6eddf6d76efe26fd68ec8042b, a variant of 273a806f0531a10d45d780305119cee04dc7bd30
25.00%

McAfee
Artemis!54CF7046A8BC, Artemis!ACF4CBBC3FFE, Artemis!36255D22CF68
18.75%

K7 AntiVirus
Adware
18.75%

Comodo Security
Application.Win32.InstallCore.KG, Application.Win32.InstallCore.DQY, Application.Win32.InstallCore.DAH
18.75%

avast!
Malware-gen
18.75%

Avira AntiVirus
ADWARE/InstallCore.A.2428, PUA/InstallCore.XS
12.50%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
12.50%

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
6.25%

The domain cdn.winzipdelivery.com has been seen to resolve to the following 27 IP addresses.

ec2-52-25-167-148.us-west-2.compute.amazonaws.com
May 16, 2016

ec2-52-35-246-224.us-west-2.compute.amazonaws.com
May 15, 2016

ec2-52-10-47-132.us-west-2.compute.amazonaws.com
May 5, 2016

ec2-52-32-132-26.us-west-2.compute.amazonaws.com
April 5, 2016

ec2-52-35-220-181.us-west-2.compute.amazonaws.com
April 2, 2016

ec2-54-191-197-143.us-west-2.compute.amazonaws.com
March 30, 2016

ec2-52-25-252-244.us-west-2.compute.amazonaws.com
March 3, 2016

ec2-52-35-72-231.us-west-2.compute.amazonaws.com
March 2, 2016

ec2-54-149-89-171.us-west-2.compute.amazonaws.com
March 2, 2016

ec2-52-89-243-234.us-west-2.compute.amazonaws.com
February 21, 2016

ec2-52-10-249-85.us-west-2.compute.amazonaws.com
February 21, 2016

ec2-54-191-172-222.us-west-2.compute.amazonaws.com
February 18, 2016

ec2-52-34-68-233.us-west-2.compute.amazonaws.com
February 3, 2016

ec2-52-27-150-245.us-west-2.compute.amazonaws.com
February 2, 2016

ec2-54-148-9-47.us-west-2.compute.amazonaws.com
February 1, 2016

ec2-54-191-159-20.us-west-2.compute.amazonaws.com
December 25, 2015

ec2-54-69-118-66.us-west-2.compute.amazonaws.com
November 25, 2015

ec2-52-24-18-121.us-west-2.compute.amazonaws.com
November 13, 2015

ec2-54-149-188-121.us-west-2.compute.amazonaws.com
November 7, 2015

ec2-52-11-237-237.us-west-2.compute.amazonaws.com
October 29, 2015

ec2-52-11-247-96.us-west-2.compute.amazonaws.com
June 18, 2015

ec2-54-149-178-255.us-west-2.compute.amazonaws.com
May 5, 2015

ec2-54-201-204-241.us-west-2.compute.amazonaws.com
May 5, 2015

ec2-54-191-25-155.us-west-2.compute.amazonaws.com
May 5, 2015

ec2-52-17-97-31.eu-west-1.compute.amazonaws.com
May 5, 2015

ec2-54-72-197-165.eu-west-1.compute.amazonaws.com
May 5, 2015

ec2-54-229-40-237.eu-west-1.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by cdn.winzipdelivery.com.

10 / 68    (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

7 / 68      (PUP)
http://cdn.winzipdelivery.com/.../woA==  (dff199c0ffbdf07c0fa0c009d9d17942)

1 / 68      (PUP)
http://cdn.winzipdelivery.com/.../UPsB9LQ==  (984a8f7c1ba3b4b220bd280c21cedd05)

 
Latest 30 of 392 download URLs