www.clearscreenplayer.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.clearscreenplayer.com is registered by proxy through ENOM, INC. and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Friday, February 26, 2016

Expires date:
Sunday, February 26, 2017

Updated date:
Tuesday, April 5, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ClearScreen (M)
100.00%

The domain www.clearscreenplayer.com has been seen to resolve to the following 2 IP addresses.

ec2-52-87-75-56.compute-1.amazonaws.com
June 7, 2016

ec2-54-209-151-6.compute-1.amazonaws.com
June 7, 2016

File downloads found at URLs served by www.clearscreenplayer.com.

1 / 68      (PUP)
http://www.clearscreenplayer.com/.../setup.msi  (57154c4adf3ea256b1cb10e1200a41bf)

The following 5 files have been seen to comunicate with www.clearscreenplayer.com in live environments.

URL:
http://www.clearscreenplayer.com/

Google Analytics:
UA-26944444

Title:
“ClearScreenPLayer - Home”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=*.clearscreenplayer.com, OU=PositiveSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.16)

30 of 42 related domains