cp.popdls.com

Tuguu SL  (via a Proxy Registrant)

Domain Information

The domain cp.popdls.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in December of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter. The domain is associated with the publisher Tuguu SL who is located in Adeje, Santa Cruz De Tenerife in Spain.
Registrar:
SOLUCIONES CORPORATIVAS IP, SL

Server location:
Oregon, United States (US)

Create date:
Wednesday, December 19, 2012

Expires date:
Monday, December 19, 2016

Updated date:
Thursday, December 31, 2015

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Tuguu.Bundler (M), PUP.Tuguu.Awimba.Bundler (M), PUP.Tuguu.LunacomI.Bundler (M)
100.00%

The domain cp.popdls.com has been seen to resolve to the following 4 IP addresses.

ec2-52-26-110-152.us-west-2.compute.amazonaws.com
May 29, 2016

ec2-54-187-119-69.us-west-2.compute.amazonaws.com
May 29, 2016

ec2-54-213-219-119.us-west-2.compute.amazonaws.com
February 13, 2016

ec2-54-191-227-226.us-west-2.compute.amazonaws.com
February 13, 2016

File downloads found at URLs served by cp.popdls.com.

1 / 68      (Adware)

1 / 68      (Adware)
http://cp.popdls.com/pasarela/affp/.../keyword=SLEND_slender  (slender-the-eight-pages_v.178818224c.exe)

1 / 68      (Adware)

1 / 68      (Adware)

The following 9 files have been seen to comunicate with cp.popdls.com in live environments.

URL:
http://cp.popdls.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx