home

cloudfront.securepccleaner.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain cloudfront.securepccleaner.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in January of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Washington, United States (US)

Create date:
Monday, January 4, 2016

Expires date:
Wednesday, January 4, 2017

Updated date:
Friday, February 26, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
securepccleaner.com

Whois:
1 securepccleaner.com record

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PCCleaner.Optional.Installer.Meta (L), PUP.SecurePCCleaner.SYSSECUR.Installer.Meta (L), PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.Systweak.SUPERTUN.Installer.Meta (L), PUP.SecurePCCleaner.SUPERTUN.Installer.Meta (M), PUP.SecurePCCleaner (M)
100.00%

Clam AntiVirus
Win.Trojan.Agent-982299
3.57%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
3.57%

Dr.Web
riskware program Program.Unwanted.1489
3.57%

The domain cloudfront.securepccleaner.com has been seen to resolve to the following 109 IP addresses.

52.84.125.104
server-52-84-125-104.iad16.r.cloudfront.net
September 15, 2016

52.84.125.53
server-52-84-125-53.iad16.r.cloudfront.net
September 15, 2016

52.84.125.41
server-52-84-125-41.iad16.r.cloudfront.net
September 15, 2016

52.84.125.12
server-52-84-125-12.iad16.r.cloudfront.net
September 15, 2016

52.84.125.147
server-52-84-125-147.iad16.r.cloudfront.net
September 15, 2016

52.84.125.129
server-52-84-125-129.iad16.r.cloudfront.net
September 15, 2016

52.84.125.119
server-52-84-125-119.iad16.r.cloudfront.net
September 15, 2016

54.192.19.242
server-54-192-19-242.iad12.r.cloudfront.net
August 22, 2016

54.192.19.231
server-54-192-19-231.iad12.r.cloudfront.net
August 22, 2016

54.192.19.210
server-54-192-19-210.iad12.r.cloudfront.net
August 22, 2016

54.192.19.195
server-54-192-19-195.iad12.r.cloudfront.net
August 22, 2016

54.192.19.190
server-54-192-19-190.iad12.r.cloudfront.net
August 22, 2016

54.192.19.132
server-54-192-19-132.iad12.r.cloudfront.net
August 22, 2016

54.192.19.8
server-54-192-19-8.iad12.r.cloudfront.net
August 22, 2016

54.192.19.244
server-54-192-19-244.iad12.r.cloudfront.net
August 22, 2016

52.84.125.32
server-52-84-125-32.iad16.r.cloudfront.net
July 17, 2016

52.84.125.167
server-52-84-125-167.iad16.r.cloudfront.net
July 17, 2016

52.84.125.154
server-52-84-125-154.iad16.r.cloudfront.net
July 17, 2016

52.84.125.91
server-52-84-125-91.iad16.r.cloudfront.net
July 17, 2016

52.84.125.68
server-52-84-125-68.iad16.r.cloudfront.net
July 17, 2016

52.84.125.60
server-52-84-125-60.iad16.r.cloudfront.net
July 17, 2016

52.85.131.190
server-52-85-131-190.iad53.r.cloudfront.net
July 4, 2016

52.85.131.131
server-52-85-131-131.iad53.r.cloudfront.net
July 4, 2016

52.85.131.116
server-52-85-131-116.iad53.r.cloudfront.net
July 4, 2016

52.85.131.74
server-52-85-131-74.iad53.r.cloudfront.net
July 4, 2016

54.192.19.252
server-54-192-19-252.iad12.r.cloudfront.net
June 30, 2016

54.192.19.180
server-54-192-19-180.iad12.r.cloudfront.net
June 26, 2016

54.192.19.145
server-54-192-19-145.iad12.r.cloudfront.net
June 26, 2016

54.192.19.133
server-54-192-19-133.iad12.r.cloudfront.net
June 26, 2016

54.192.19.117
server-54-192-19-117.iad12.r.cloudfront.net
June 26, 2016

 
Showing 30 of 109 IP Addresses

File downloads found at URLs served by cloudfront.securepccleaner.com.

0 / 68
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (1_spdl_1.tmp)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (3064114c2d22cb45075574f093efd57c)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (baab6cca4ab5fd9c424a13a830f58972)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/.../spccsetup_site.exe  (297498d7b9a3368ed0bcee2bd51f2942)

2 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/.../spccsetup_site.exe  (ea3ee9b58157769a2e9be6cbd526bacc)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (6aa668e6edff92b1f832160473c0896b)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (a9fdd608d3810c5c40fc9d7a7663673d)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (ca1551da727f776f1c543d1fc68b0531)

2 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (ed45f03035fcee572abbddf6171223e7)

0 / 68
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (148588507d7e61dfc032bc81d7143673)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (f9dda1d32f6322beb7703d87901972bb)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/.../spccsetup_1029dl.exe  (8e087f452a8ae3c260d06622ed140268)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (8d89b8a87fc6ae8733f5c7400a199897)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (f217f571dc9b11ed71917e95c0d1c386)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (207acf1bc8447bd80293dd7f5a9b944b)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/.../spccsetup_1029dl.exe  (5fe56968981d50d68fc9e2ed919f27e9)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (60eaddfb12e5620932970129fe43655d)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (90fae4edb4133642bd22e80c56fd71d8)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (6a0b42a48d1699e5e9f76baea7e67deb)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (010d5a7a731b54fa35bc2828cd0d868c)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (a5f422a7d45f67db2b6c00bb6e3925bc)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (4a9129371742a02e38c4bbbcc3d81ef4)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (cef0130821436f096b10921e17450371)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (380574d48b535f6917d8f0398ffeef6c)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (762e5c66169ad5a95da7c80720ba1810)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (fa1a1b0e9315abf51a50e56ac952ed45)

2 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (4503fdb8b389ba2f612e5651b669c6eb)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (c043335dc18d3b7bc4736e24bc7f2181)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (5bef85d611667cff9b3d88ca47da6e3c)

1 / 68      (PUP)
http://cloudfront.securepccleaner.com/securepccleaner/setups/.../setup.exe  (524241febeba15fa9ff52ec25df512f7)

 
Latest 30 of 30 download URLs

The following 247 files have been seen to comunicate with cloudfront.securepccleaner.com in live environments.

TCP » 54.192.19.145:80
wfini.exe (Trend Service by Trend)

TCP » 54.192.19.39:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.132:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.190:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.180:80
browser.exe (Browser)

TCP » 54.192.19.244:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.217:80
se.exe

TCP » 52.85.142.78:443
jingling.exe

TCP » 52.85.142.18:80
jingling.exe

TCP » 54.192.19.195:443
jingling.exe

TCP » 54.192.195.120:443
onlineguardian-v2.exe

TCP » 52.85.142.180:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.19.97:80
winsaber.exe

TCP » 54.192.19.117:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.117:80
browser.exe (speed browser by Smart Applications)

TCP » 52.85.131.84:443
browser.exe (Browser)

TCP » 52.84.125.129:443
browser.exe (Speed Browser by Smart Applications)

TCP » 54.192.19.18:80
uvconverter.exe

TCP » 52.84.125.129:443
bobrowser.exe (BoBrowser by The BoBrowser Authors)

 
Latest 20 of 512 files

URL:
http://cloudfront.securepccleaner.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.