home

cdn.winziprepository.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cdn.winziprepository.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Saturday, March 28, 2015

Expires date:
Tuesday, March 28, 2017

Updated date:
Sunday, February 21, 2016

Root domain:
winziprepository.com

Whois:
2 winziprepository.com records

Scanner detections:
Detections  (60% detected)

Scan engine
Details
Detections

herdProtect (fuzzy)
a variant of 7dd6b86bdfb4dbe6eddf6d76efe26fd68ec8042b, a variant of 273a806f0531a10d45d780305119cee04dc7bd30
75.00%

Bkav FE
W32.HfsAdware
75.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dqvwsp
75.00%

Trend Micro House Call
Suspicious_GEN.F47V0402
75.00%

Dr.Web
Trojan.InstallCore.402
75.00%

ESET NOD32
Win32/InstallCore.YR potentially unwanted (variant)
75.00%

Fortinet FortiGate
Riskware/InstallCore
75.00%

avast!
Malware-gen
75.00%

The domain cdn.winziprepository.com has been seen to resolve to the following 7 IP addresses.

52.25.167.148
ec2-52-25-167-148.us-west-2.compute.amazonaws.com
May 16, 2016

54.191.197.143
ec2-54-191-197-143.us-west-2.compute.amazonaws.com
April 21, 2016

52.35.220.181
ec2-52-35-220-181.us-west-2.compute.amazonaws.com
April 14, 2016

54.149.89.171
ec2-54-149-89-171.us-west-2.compute.amazonaws.com
March 4, 2016

52.10.249.85
ec2-52-10-249-85.us-west-2.compute.amazonaws.com
February 23, 2016

52.27.150.245
ec2-52-27-150-245.us-west-2.compute.amazonaws.com
February 10, 2016

54.171.12.207
ec2-54-171-12-207.eu-west-1.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by cdn.winziprepository.com.

8 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=BUjY7u5K2vGttywU2kDA1Bd4oIUIb2gOTrRGFvdrwy4=&downloadAs=winzip19-new.exe&c=2o2i13RzW5jps4k3pT7NEV6Kx1tGYSNWB10OPZYSwOSkmb8Hzl1EJie7C6InOuISvi2RW4mJxTCCm96NxFQYrw==  (7f8367d6becfa16adc073c0e1b5f9b2e)

8 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=0jpHtI6wXDVWxwTX22N3sDBkpHjdMwBiqU7bwRVRLZ8=&downloadAs=winzip19-lan.exe&c=gULiQwrUVK6eQTvoap26G/.../1rf0w==  (5f229ad68f55183ffd462c724f39f669)

0 / 68
http://cdn.winziprepository.com/c?fallback_url= &x=lBdYuuPFkxBlBYZimuay63bJsyhDx65mtll6bGR2kJE=&downloadAs=wz19-mf.exe&c=zMK0xz8unI7hm/lkxBHfSM1RAVJPnQnm nkR2iYJkS/PF8JwU/NePgPGqFq/.../slaIKTC1vghbwBZP2w==  (7c021272e0cf64e172be1cced771c7a2)

7 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=G1Y3RpbtsMj/y2VRHdQPo/HVNv8FZ4UCBd7x9QFiKUg=&downloadAs=winzip19-lan.exe&c=WAHzDkCublSHrMOmkHbD KRzwy/e/dA4DVU/.../0EecVJdurWQ2ZyogPKynNA==  (dff199c0ffbdf07c0fa0c009d9d17942)

7 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=rqc 8dbNX7qDObs1Izwgnmt17GBDe jByebh04E/.../vklFrZv8J73iKCusUvdbsA==  (dff199c0ffbdf07c0fa0c009d9d17942)

0 / 68
http://cdn.winziprepository.com/.../QwrwBX60RBgzZIKoY6g==  (7c021272e0cf64e172be1cced771c7a2)

7 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=iU4KhBIfQVh3tMwkwKOxNjKJ95Ce2DoGaAR3i7jVv g=&downloadAs=winzip19-lan.exe&c=pwPdxppiayrtgZ0eE0nkDcEJvSUGmPtUtnsfG6Y4DwJE/.../p2cB4Drm2C23J7Q9EBLJnSOtrprzWhNP7SOKA==  (dff199c0ffbdf07c0fa0c009d9d17942)

7 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=d6hp82eo0ePp/yvvWD1OuM58z5Bb/kjs3uILNnhnh Y=&downloadAs=winzip19-lan.exe&c=MsX9cIJZxw wQvzq/.../24WECaT10OKjg==  (dff199c0ffbdf07c0fa0c009d9d17942)

0 / 68
http://cdn.winziprepository.com/c?fallback_url= &x=KjneBQQRYgZqeE5x5m95K/LYkEhSLucb9WtSLwHxmq0=&downloadAs=wz19-mf.exe&c=iVOL8e/.../rhjkrHquJs3qskDx6VNReSe9dCqgxsPcfgp8DmQDAzOqALw==  (7c021272e0cf64e172be1cced771c7a2)

7 / 68      (PUP)
http://cdn.winziprepository.com/.../9KkXqfHraQDALtToKwgl5mA==  (dff199c0ffbdf07c0fa0c009d9d17942)

0 / 68
http://cdn.winziprepository.com/c?fallback_url= &x=1vNYKH/JRz5xTnuBWhLzcz5pOs4jQeDzSvsiWGsP74k=&downloadAs=wz19-mf.exe&c=P8u24pP8vruP5X3OO6ItLX6BUco6We/roa ougkt4/L777ebV6rARbizMhfmmmejrnowazx33s/.../aqBw==  (7c021272e0cf64e172be1cced771c7a2)

0 / 68
http://cdn.winziprepository.com/.../DHqOQX9CkzFmbvYoWcJQ==  (7c021272e0cf64e172be1cced771c7a2)

1 / 68      (inconclusive)
http://cdn.winziprepository.com/.../fQmp1TitYZUj xOV2pj1GB9vRP252sPBrdm5vwCchY=&downloadAs=winzip19-new.exe&c=520OYnCVqLxkwGTGw12s3U9wEJOJutolZZZGtW78VmxXe9yq0ZagCRSD4muev90KwMGcsWrSKh11884YRdO4dA==  (71b275a125e6aab2053fb65337e7c297)

0 / 68
http://cdn.winziprepository.com/.../2BbMfh 2nuQGSPIG7hM47WyNtJod7H0hwq74qbuHr9B8tkYP5S0vZ00MITLGPbfawPBYxVZfpgsDQg==  (7c021272e0cf64e172be1cced771c7a2)

8 / 68      (PUP)
http://cdn.winziprepository.com/c?fallback_url= &x=Kf9euet M0p/BqWa3FCRz3VoiwYR3OLjkSP7BFq/.../X 6GxY9MAJM7i1HSQnXHb4IsJ3hVPg0DMx62cQ==  (7f8367d6becfa16adc073c0e1b5f9b2e)

7 / 68      (PUP)
http://cdn.winziprepository.com/.../HE=&downloadAs=winzip19-lan.exe&c=9 fpBHvnoO2Xw 6T6fkI9sPRDqSyJ1RLIrMvL6H946NBeuAVUUvVGZLIUsqssUTCbs0IOGZGvPrjwNbPEVUeTg==  (dff199c0ffbdf07c0fa0c009d9d17942)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.