home

downloads.pluto.tv

WHOIS PRIVACY PROTECTION SERVICE, INC.  (Proxy Registrant)

Domain Information

The domain downloads.pluto.tv is registered by proxy through ENOM, INC. and was originally registered in February of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Saturday, February 23, 2013

Updated date:
Thursday, December 10, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
pluto.tv

Whois:
2 pluto.tv records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PlutoTV (M), PUP.PlutoTV.Installer.Installer.Meta (M)
100.00%

The domain downloads.pluto.tv has been seen to resolve to the following 80 IP addresses.

52.84.127.141
server-52-84-127-141.iad16.r.cloudfront.net
August 30, 2016

52.84.127.139
server-52-84-127-139.iad16.r.cloudfront.net
August 30, 2016

52.84.127.110
server-52-84-127-110.iad16.r.cloudfront.net
August 30, 2016

52.84.127.227
server-52-84-127-227.iad16.r.cloudfront.net
August 30, 2016

52.84.127.224
server-52-84-127-224.iad16.r.cloudfront.net
August 30, 2016

52.84.127.208
server-52-84-127-208.iad16.r.cloudfront.net
August 30, 2016

52.84.127.200
server-52-84-127-200.iad16.r.cloudfront.net
August 30, 2016

52.84.127.185
server-52-84-127-185.iad16.r.cloudfront.net
August 30, 2016

52.84.122.111
server-52-84-122-111.iad16.r.cloudfront.net
July 3, 2016

52.84.122.104
server-52-84-122-104.iad16.r.cloudfront.net
July 3, 2016

52.84.122.73
server-52-84-122-73.iad16.r.cloudfront.net
July 3, 2016

52.84.122.55
server-52-84-122-55.iad16.r.cloudfront.net
July 3, 2016

52.84.122.22
server-52-84-122-22.iad16.r.cloudfront.net
July 3, 2016

52.84.122.230
server-52-84-122-230.iad16.r.cloudfront.net
July 3, 2016

52.84.122.129
server-52-84-122-129.iad16.r.cloudfront.net
July 3, 2016

52.84.122.114
server-52-84-122-114.iad16.r.cloudfront.net
July 3, 2016

54.192.195.45
server-54-192-195-45.iad53.r.cloudfront.net
May 27, 2016

54.192.195.34
server-54-192-195-34.iad53.r.cloudfront.net
May 27, 2016

54.192.195.228
server-54-192-195-228.iad53.r.cloudfront.net
May 27, 2016

54.192.195.155
server-54-192-195-155.iad53.r.cloudfront.net
May 27, 2016

54.192.195.131
server-54-192-195-131.iad53.r.cloudfront.net
May 27, 2016

54.192.195.104
server-54-192-195-104.iad53.r.cloudfront.net
May 27, 2016

54.192.195.70
server-54-192-195-70.iad53.r.cloudfront.net
May 27, 2016

54.192.195.55
server-54-192-195-55.iad53.r.cloudfront.net
May 27, 2016

54.192.18.176
server-54-192-18-176.iad12.r.cloudfront.net
May 17, 2016

54.192.18.150
server-54-192-18-150.iad12.r.cloudfront.net
May 17, 2016

54.192.18.144
server-54-192-18-144.iad12.r.cloudfront.net
May 17, 2016

54.192.18.14
server-54-192-18-14.iad12.r.cloudfront.net
May 17, 2016

54.192.18.220
server-54-192-18-220.iad12.r.cloudfront.net
May 17, 2016

54.192.18.219
server-54-192-18-219.iad12.r.cloudfront.net
May 17, 2016

 
Showing 30 of 80 IP Addresses

File downloads found at URLs served by downloads.pluto.tv.

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/releases/0.3.0/.../PlutoTVSetup.exe  (60de1e15d85cc08b5ae6597f3b59fd5a)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/electron/0.2.0/.../PlutoTVSetup.exe  (7a9363d96b9d6d2eaadaccc029a19295)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/electron/0.2.0/.../PlutoTVSetup.exe  (14dc547515bb8d1ef6f6b0485f18c254)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/electron/0.2.0/.../PlutoTVSetup.exe  (07bb995285cb2029b3308facf4738de4)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/0.1.7/.../PlutoTVSetup.exe  (9b74f58761834775b69015865c59331f)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/0.1.7/.../PlutoTVSetup.exe  (d1f9c12061a4411a852a38783064d639)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/0.1.5/.../PlutoTVSetup.exe  (plutotvsetup0910.exe)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/0.0.7/.../PlutoTV-0.0.7.exe  (177cc32cca1b65ba22da7e0b8ab6ce88)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/0.0.5/.../PlutoTV-0.0.5.exe  (3ebe94de7fbc29c6f954c4f6fbc7522b)

1 / 68      (PUP)
http://downloads.pluto.tv/desktop/0.0.8/.../PlutoTV-0.0.8.exe  (02d24403e95dcf5d2fd855312756aef0)

1 / 68      (PUP)
http://downloads.pluto.tv/PlutoTVSetup.exe  (931e2eb5b1902248eda3084639bb83a9)

The following 19 files have been seen to comunicate with downloads.pluto.tv in live environments.

TCP » 54.192.18.94:80
browser.exe (Speed Browser by Smart Applications)

TCP » 54.192.195.104:443
browser.exe (speed browser by Fast Applications)

TCP » 54.230.37.214:443
browser.exe (Browser)

TCP » 54.230.37.173:80
DriverAssist.exe

TCP » 54.230.37.214:443
catwsprx.exe (CatWSPrx.exe by Catalytix Web Services)

TCP » 54.230.37.173:443
browser.exe (Browser)

TCP » 54.230.37.214:80
browser.exe (Browser)

TCP » 54.230.38.152:443
dailywiki.exe

TCP » 54.192.195.155:80
crossbrowse.exe (Crossbrowse)

TCP » 54.230.18.64:443
u.exe

TCP » 54.230.193.226:80
csrcc.exe

TCP » 54.230.37.173:80
appmarket.crx

TCP » 54.230.37.173:80
geniecleaner.exe (Genie Cleaner by Mobogenie.com)

TCP » 54.230.37.173:80
Weather.exe (WeatherBug Desktop by AWS Convergence Technologies)

TCP » 54.230.37.173:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 54.230.38.152:80
nsbf4ee.tmp

TCP » 54.230.38.152:80
mlbroyals_theme.crx

TCP » 54.230.38.152:443
nsx7f3e.tmp

TCP » 54.230.38.77:443
wikithemes.exe

TCP » 54.230.39.233:80
tfdth57t.tmp

 
Latest 20 of 26 files

URL:
http://downloads.pluto.tv/

Network:
Amazon Cloudfront

SSL certificate subject:
CN=*.pluto.tv

SSL certificate issuer:
CN=Amazon, OU=Server CA 1B, O=Amazon, C=US

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.