home

downprov.bubbledownload.com

Whois Privacy Corp.

Domain Information

The domain downprov.bubbledownload.com registered by Whois Privacy Corp. was initially registered in October of 2014 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
INTERNET.BS CORP.

Server location:
Arizona, United States (US)

Create date:
Sunday, October 12, 2014

Expires date:
Monday, October 12, 2015

Updated date:
Sunday, October 12, 2014

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:
bubbledownload.com

Whois:
1 bubbledownload.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Ukra2006.s, PUP.Ukra2006.b, PUP.Ukra2006.k, PUP.Ukra2006.w, Adware.Amonetize.ET (M)
100.00%

Sophos
Amonetize
80.00%

G Data
NSIS.Application.Crypted
80.00%

AVG
nbsp;
80.00%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
40.00%

McAfee
Artemis!308966F7C992
20.00%

avast!
Win32:Malware-gen
20.00%

ESET NOD32
Win32/Amonetize.CA potentially unwanted application
20.00%

The domain downprov.bubbledownload.com has been seen to resolve to the following 2 IP addresses.

104.28.2.11
November 10, 2014

104.28.3.11
November 10, 2014

File downloads found at URLs served by downprov.bubbledownload.com.

4 / 68      (Adware)
http://downprov.bubbledownload.com/.../Yasmin.Gamal.Ahla.Wahda.2014.MyEgy.rar_10924_i1249151_il345.exe  (hotline miami 2.0.1.5 drm free (gog)_10924_i1297227_il345.exe)

2 / 68      (PUP)
http://downprov.bubbledownload.com/.../Cure Bloodflowers_10924_i762361_il345.exe  (2db94e871cf0b8465ab8526c8ab70567)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../emme2 download_10924_i961076_il345.exe  (multi mess 12_10924_i942347_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../cpm chart_10924_i1036856_il345.exe  (multi mess 12_10924_i942347_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../musique du jeu zumba fitness rush_10924_i896108_il345.exe  (multi mess 12_10924_i942347_il345.exe)

7 / 68      (Adware)
http://downprov.bubbledownload.com/.../adobe fireworks cs6 keygen and crack file_10924_i847825_il345.exe  (marta and david reallifecam.rar_10924_i716066_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../Linkinpark The Hunting Party (Explicit) 320k mp3 ak2014_10924_i1071488_il345.exe  (multi mess 12_10924_i942347_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../Cities.XL.2012.PC.[crack keygen].2011_10924_i930216_il345.exe  (multi mess 12_10924_i942347_il345.exe)

7 / 68      (Adware)
http://downprov.bubbledownload.com/.../Enforcer Police Crime Action CODEX_10924_i857963_il345.exe  (marta and david reallifecam.rar_10924_i716066_il345.exe)

4 / 68      (Adware)
http://downprov.bubbledownload.com/.../Downloader_10924_i1195026_il345.exe  (bb flashback 5 keygen_10924_i1218217_il345.exe)

7 / 68      (Adware)
http://downprov.bubbledownload.com/.../Flits En Het Magische Huis Movie NL 2014.720p BRRip XViD NL Subs_10924_i639529_il345.exe  (marta and david reallifecam.rar_10924_i716066_il345.exe)

7 / 68      (Adware)
http://downprov.bubbledownload.com/.../Space Rangers HD A War Apart RELOADED_10924_i635188_il345.exe  (marta and david reallifecam.rar_10924_i716066_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../MGMT ORACULAR SPECTACULAR [MP3 320 kbps]_10924_i1077328_il345.exe  (multi mess 12_10924_i942347_il345.exe)

4 / 68      (Adware)
http://downprov.bubbledownload.com/.../Hulu Plugin For Plex_10924_i1203380_il345.exe  (bb flashback 5 keygen_10924_i1218217_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../adobe audition 3.0 en espanol_10924_i1075653_il345.exe  (multi mess 12_10924_i942347_il345.exe)

7 / 68      (Adware)
http://downprov.bubbledownload.com/.../transporteur 4 film complet en francais torrent_10924_i725248_il345.exe  (marta and david reallifecam.rar_10924_i716066_il345.exe)

5 / 68      (Adware)
http://downprov.bubbledownload.com/.../Hud Red_10924_i967103_il345.exe  (multi mess 12_10924_i942347_il345.exe)

URL:
http://downprov.bubbledownload.com/

SSL certificate subject:
CN=sni21142.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx (PHP/5.4.37)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.