d.sfquickdelivery.com
Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)
Domain Information
The domain d.sfquickdelivery.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Dublin City, Ireland (IE)
Create date:
Sunday, February 8, 2015
Expires date:
Wednesday, February 8, 2017
Updated date:
Monday, January 25, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Bundler.installCore, PUP.installCore.MaxSourceAfterDownload.Installer (M), PUP.Installer.Bundler.Installer.Meta (M), PUP.installCore.MaxSourc.Installer (M), PUP.installCore (M)
100.00%
Dr.Web
Trojan.InstallCore.52
34.38%
ESET NOD32
Win32/InstallCore.WI potentially unwanted application, Win32/InstallCore.ACZ potentially unwanted application
34.38%
Avira AntiVirus
Adware/InstallCore.765232, ADWARE/InstCo.emasg
34.38%
K7 AntiVirus
Trojan
34.38%
VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
31.25%
Clam AntiVirus
Win.Trojan.Installcore-434
31.25%
Comodo Security
Application.Win32.InstallCore.KH, Application.Win32.InstallCore.AKJ
12.50%
Bkav FE
W32.HfsAdware
9.38%
AhnLab V3 Security
PUP/Win32.InstallCore
9.38%
herdProtect (fuzzy)
a variant of 5bfec7eaffc2bebc2d617c9a965222eb3af3f636, a variant of 25b4d86cc162dde5b40460ff1436087da535c336
6.25%
IKARUS anti.virus
AdWare.InstCo
6.25%
Baidu Antivirus
Adware.Win32.InstallCore
6.25%
Malwarebytes
PUP.Optional.InstallCore
3.13%
The domain d.sfquickdelivery.com has been seen to resolve to the following 7 IP addresses.
ec2-52-35-220-181.us-west-2.compute.amazonaws.com
April 15, 2016
ec2-54-191-197-143.us-west-2.compute.amazonaws.com
April 7, 2016
ec2-52-24-190-232.us-west-2.compute.amazonaws.com
December 23, 2015
ec2-54-218-31-78.us-west-2.compute.amazonaws.com
December 15, 2015
ec2-54-69-118-66.us-west-2.compute.amazonaws.com
December 7, 2015
ec2-52-24-62-237.us-west-2.compute.amazonaws.com
August 21, 2015
ec2-54-77-56-158.eu-west-1.compute.amazonaws.com
May 5, 2015
File downloads found at URLs served by d.sfquickdelivery.com.
