home

d.winzipsuperbfiles.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain d.winzipsuperbfiles.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Tuesday, March 31, 2015

Expires date:
Friday, March 31, 2017

Updated date:
Sunday, February 21, 2016

Root domain:
winzipsuperbfiles.com

Whois:
2 winzipsuperbfiles.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

herdProtect (fuzzy)
a variant of 7dd6b86bdfb4dbe6eddf6d76efe26fd68ec8042b, a variant of 273a806f0531a10d45d780305119cee04dc7bd30
100.00%

Bkav FE
W32.HfsAdware
100.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dqvwsp
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0402
100.00%

Dr.Web
Trojan.InstallCore.402
100.00%

ESET NOD32
Win32/InstallCore.YR potentially unwanted (variant)
100.00%

Fortinet FortiGate
Riskware/InstallCore
100.00%

avast!
Malware-gen
66.67%

The domain d.winzipsuperbfiles.com has been seen to resolve to the following 5 IP addresses.

52.35.246.224
ec2-52-35-246-224.us-west-2.compute.amazonaws.com
May 18, 2016

54.191.197.143
ec2-54-191-197-143.us-west-2.compute.amazonaws.com
April 14, 2016

52.89.243.234
ec2-52-89-243-234.us-west-2.compute.amazonaws.com
February 24, 2016

52.10.249.85
ec2-52-10-249-85.us-west-2.compute.amazonaws.com
February 22, 2016

54.149.245.13
ec2-54-149-245-13.us-west-2.compute.amazonaws.com
July 1, 2015

File downloads found at URLs served by d.winzipsuperbfiles.com.

8 / 68      (PUP)
http://d.winzipsuperbfiles.com/c?fallback_url= &x=2Mkd/Tl2isJ6/uF/.../SptKfGV6wQr4FzUU08mdjDGRe RnUCXDI84iLeunf6 ZiHClvwiQ==  (104c37c572d1895ddbe9aa2556b7d91f)

7 / 68      (PUP)
http://d.winzipsuperbfiles.com/c?fallback_url= &x=wOjAlDZ7jmeksDagqAEEzqzirxzjI16r/.../8IVylpdUoyGuMKae6TlQ4RuRnRgcs2KUm7g1u jYH6h0luoZ pG8lfRvw==  (dff199c0ffbdf07c0fa0c009d9d17942)

7 / 68      (PUP)
http://d.winzipsuperbfiles.com/c?fallback_url= &x=FzVv3ldM1JQ9kFwfPkffP0WzlUnb4ZEmMBbIEy80OoI=&downloadAs=winzip19-lan.exe&c=rUa5Z7omUXuT4JCcl6uy7QKuw4zP9A3UG178gwwaArSa9/74HXQLTni3brNayF/.../wjuNhQe Ps1F5zXsjuA==  (dff199c0ffbdf07c0fa0c009d9d17942)

8 / 68      (PUP)
http://d.winzipsuperbfiles.com/c?fallback_url= &x=Tg0ORDGDaMoy04e8jacWMFPQEGTDUsL/nb1n ZEWUck=&downloadAs=winzip19.exe&c=xUq0M2rlM0/lJqfwjb8hLPIsQFUPeFt4IgMMN/YxOJRadn/.../VA2kGTxa4ndUoKNlUlhw==  (104c37c572d1895ddbe9aa2556b7d91f)

7 / 68      (PUP)
http://d.winzipsuperbfiles.com/c?fallback_url= &x=72oqoka6US6qS8cGeowOC/vn4A5LkkDU43/wtYLx4mM=&downloadAs=winzip19-lan.exe&c=bqLyvf7JEYVpnKviKgnWCb1b9ie/.../MalZfOZkajblhIMQ==  (dff199c0ffbdf07c0fa0c009d9d17942)

8 / 68      (PUP)
http://d.winzipsuperbfiles.com/c?fallback_url= &x=vlogvZ45LT7H/.../6HcGLJagu94i5byE=&downloadAs=winzip19-new.exe&c=w8tmSpXyy7lcjT0xtKGlEQDY0qERomvrCeNXKYpIKELiCqdEN5ow ZHAkYlCf5 fHpQ8lUpk0oI96NXEjqHZvw==  (7f8367d6becfa16adc073c0e1b5f9b2e)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.