home

www.safecanadapro.info

North East Technology

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Francisco, California within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
Dynadot, LLC (R259-LRMS)

Server location:
California, United States (US)

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.

Root domain:
safecanadapro.info

Whois:
3 safecanadapro.info records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer.U, PUP.Optional.Installer.T, PUP.Optional.Installer.U, Adware.WebPick.Installer.c, Adware.WebPick.Installer.d, Adware.WebPick.Installer.BB, Adware.WebPick.Installer (M), Adware (M)
100.00%

McAfee
PUP-FHQ!D6AAD1C6E22F
28.57%

Malwarebytes
PUP.Optional.InstalleRex, PUP.Optional.Installex, PUP.Optional.Installrex
28.57%

Kaspersky
Trojan.Win32.AntiFW
28.57%

Comodo Security
Application.Win32.InstalleRex.KG
28.57%

Sophos
InstallRex
28.57%

G Data
Gen:Variant.Kazy.348128, Trojan.Generic.11210459, Win32.Application.InstalleRex, Gen:Variant.Application.Strictor.55164
28.57%

AhnLab V3 Security
PUP/Win32.TSULoader
28.57%

Vba32 AntiVirus
Downloader.AdLoad, Downware.TSU
28.57%

MicroWorld eScan
Gen:Variant.Kazy.348128, Trojan.Generic.11210459, Gen:Variant.Application.Strictor.55164
21.43%

Bitdefender
Gen:Variant.Kazy.348128, Trojan.Generic.11210459, Gen:Variant.Application.Strictor.55164
21.43%

Lavasoft Ad-Aware
Gen:Variant.Kazy.348128, Trojan.Generic.11210459, Gen:Variant.Application.Strictor.55164
21.43%

Emsisoft Anti-Malware
Gen:Variant.Kazy.348128, Trojan.Generic.11210459, Gen:Variant.Application.Strictor.55164
21.43%

F-Secure
Gen:Variant.Kazy.348128, Trojan.Generic.11210459, Gen:Variant.Application.Strictor
21.43%

Dr.Web
Trojan.WebPick.29, Adware.Downware.1541
21.43%

The domain www.safecanadapro.info has been seen to resolve to the following 3 IP addresses.

69.172.201.208
September 5, 2014

108.162.198.90
(CloudFlare)
February 27, 2014

108.162.199.90
(CloudFlare)
February 27, 2014

File downloads found at URLs served by www.safecanadapro.info.

1 / 68      (Adware)
http://www.safecanadapro.info/download/v298?product_name=DeepFreeze.Standard.v6.62.020.3058parawindows7.rar&filesize=3.53 MB&product_title=DeepFreeze.Standard.v6.62.020.3058parawindows7.rar&installer_file_name=DeepFreeze.Standard.v6.62.020.3058parawindows7.rar&product_file_name=DeepFreeze.Standard.v6.62.020.3058parawindows7.rar&product_download_url=http://.../store/temp4/2011/7/14/D//1310593484_DeepFreeze.Standard.v6.62.020.3058parawindows7.rar&reffer=http://.../&uuid=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  (deepfreeze.standard.v6.62.020.3058parawindows7.rar.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/download/v298?product_name=02221200.rar&filesize=38.75 KB&product_title=02221200.rar&installer_file_name=02221200.rar&product_file_name=02221200.rar&product_download_url=http://.../store/temp4/2012/1/5/D//1325760979_02221200.rar&reffer=http://.../&uuid=THmF2JbJSId7b7UY1oOjWFgWt4SXUiUq8GcLm5kp62DxQ0TE19TS5QM098nEWAPJp0J0KRtk524yifxQkaC0a3xSUutJzYGJZw56fweBzMwYzhVc63vl3jZCaJZOlLm5YMG5ePM9F905Su6xop5x9kfQ4PFKJaOxQ8fHVKlz5DgEqZytC1MeXYBnKi5jyBonN0mGNUfDsACkVaqLyRI2nYH0wP2GVGRP9bysPmhcFZ9kKfNVc9YnoPpTGo00juCRP81C8SE3nxxldKb6TXeWys7McVZ5RwiSU7rMxYEZPa0rkhhClS4NRJxmXLHaIh6VkKeR9dKyt67awYAq6JCnjYnzfdVtIJ2tRsAxsmxms3KKioqt0OTQqWkDkJGksqLEzsKJ53MiiGD6iSMerd71v2T3MN9FhuFrll5Hrt8hF4Txwrr2o1icocTdTAeXGudiJMXCuBJsEFyvANfGTHjmQI0g1AJEuAKGIuOBiFzqD1C9NkJ96966aZpk6G8VlSGrWNawQVbQBl41qIyuh90OdEpoFyIAEOcWvqHvk4nble4PPGbcqiBk4JZwdgoGCNxuXT2oNlxb1wySclw9Hw1uRDP5nBJVqBEYWKFTQWtEnXrGTwyh0bsW7ThKPAFVFPte1b7Adzo9spJOpqM1Yu2qDzf08jqkb7nwIxKDDJB2apYWlDOtXTCCQ7MC4  (02221200.rar.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298/?product_name=.pdf&filesize=83.43 KB&product_title=.pdf&installer_file_name=.pdf&product_file_name=.pdf&product_download_url=http://www.ziddu.com/store/temp5/2013/8/25/D//1377419049_.pdf&uuid=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  (pdf.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298/?product_name=BanglaWord.exe&filesize=4.74 MB&product_title=BanglaWord.exe&installer_file_name=BanglaWord.exe&product_file_name=BanglaWord.exe&product_download_url=http://www.ziddu.com/store/temp5/2011/3/14/D//1300107819_BanglaWord.exe&uuid=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  (banglaword.exe.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298/?product_name=fisikadasarUniversitas.pdf&filesize=432.41 KB&product_title=fisikadasarUniversitas.pdf&installer_file_name=fisikadasarUniversitas.pdf&product_file_name=fisikadasarUniversitas.pdf&product_download_url=http://www.ziddu.com/store/temp2/temp1/2011/1/17/D//1295276227_fisikadasarUniversitas.pdf  (fisikadasaruniversitas.pdf.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298/?product_name=fisika_dasar.pdf&filesize=1.03 MB&product_title=fisika_dasar.pdf&installer_file_name=fisika_dasar.pdf&product_file_name=fisika_dasar.pdf&product_download_url=http://www.ziddu.com/store/temp2/temp1/2011/1/17/D//1295276227_fisika_dasar.pdf  (fisika_dasar.pdf.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298?product_name=TypeFaster-v0.4.2-install.exe&filesize=1.85 MB&product_title=TypeFaster-v0.4.2-install.exe&installer_file_name=TypeFaster-v0.4.2-install.exe&product_file_name=TypeFaster-v0.4.2-install.exe&product_download_url=http://www.ziddu.com/store/temp2/2012/12/13/D//1355415397_TypeFaster-v0.4.2-install.exe  (typefaster-v0.4.2-install.exe.exe)

32 / 68    (Adware)
http://www.safecanadapro.info/download/v298?product_name=russian.rar&filesize=1.13 MB&product_title=russian.rar&installer_file_name=russian.rar&product_file_name=russian.rar&product_download_url=http://.../store/temp1/2013/8/7/D//1375890676_russian.rar&reffer=http://.../&uuid=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  (russian.rar.exe)

32 / 68    (Adware)
http://www.safecanadapro.info/v298?product_name=russian.rar&filesize=1.13 MB&product_title=russian.rar&installer_file_name=russian.rar&product_file_name=russian.rar&product_download_url=http://www.ziddu.com/store/temp1/2013/8/7/D//1375890676_russian.rar  (russian.rar.exe)

26 / 68    (Adware)
http://www.safecanadapro.info/v298/?product_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&filesize=82.95 MB&product_title=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&installer_file_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&product_file_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&product_download_url=http://www.ziddu.com/store/temp2/temp1/temp3/2010-3-25/D//1269527939_MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&uuid=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  (myegy.com.p.s.7.by.g_me.on.part2.rar.exe)

26 / 68    (Adware)
http://www.safecanadapro.info/v298/?product_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&filesize=82.95 MB&product_title=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&installer_file_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&product_file_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&product_download_url=http://www.ziddu.com/store/temp2/temp1/temp3/2010-3-25/D//1269527939_MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar  (myegy.com.p.s.7.by.g_me.on.part2.rar.exe)

26 / 68    (Adware)
http://www.safecanadapro.info/v298?product_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&filesize=82.95 MB&product_title=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&installer_file_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&product_file_name=MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar&product_download_url=http://www.ziddu.com/store/temp2/temp1/temp3/2010-3-25/D//1269527939_MyEgy.CoM.P.S.7.By.G_ME.ON.part2.rar  (myegy.com.p.s.7.by.g_me.on.part2.rar.exe)

32 / 68    (Adware)
http://www.safecanadapro.info/download/v298?product_name=AdvancedEngineeringMaths-Kreyzig.rar&filesize=24.18 MB&product_title=AdvancedEngineeringMaths-Kreyzig.rar&installer_file_name=AdvancedEngineeringMaths-Kreyzig.rar&product_file_name=AdvancedEngineeringMaths-Kreyzig.rar&product_download_url=http://.../store/temp5/2011/4/24/D//1303591276_AdvancedEngineeringMaths-Kreyzig.rar&reffer=http://.../&uuid=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  (advancedengineeringmaths-kreyzig.rar.exe)

32 / 68    (Adware)
http://www.safecanadapro.info/v298?product_name=AdvancedEngineeringMaths-Kreyzig.rar&filesize=24.18 MB&product_title=AdvancedEngineeringMaths-Kreyzig.rar&installer_file_name=AdvancedEngineeringMaths-Kreyzig.rar&product_file_name=AdvancedEngineeringMaths-Kreyzig.rar&product_download_url=http://www.ziddu.com/store/temp5/2011/4/24/D//1303591276_AdvancedEngineeringMaths-Kreyzig.rar  (advancedengineeringmaths-kreyzig.rar.exe)

14 / 68    (Adware)
http://www.safecanadapro.info/download/v298?product_name=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&filesize=99.59 MB&product_title=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&installer_file_name=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&product_file_name=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&product_download_url=http://.../store/temp1/temp3/temp5/D/2009-7-19//1247995457_TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&reffer=http://.../&uuid=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  (tlotr1.myegy.com.by.supercrazy.part1.rar.exe)

14 / 68    (Adware)
http://www.safecanadapro.info/v298?product_name=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&filesize=99.59 MB&product_title=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&installer_file_name=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&product_file_name=TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar&product_download_url=http://www.ziddu.com/store/temp1/temp3/temp5/D/2009-7-19//1247995457_TLOTR1.MyEgy.com.By.SuperCrazy.part1.rar  (tlotr1.myegy.com.by.supercrazy.part1.rar.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298?product_name=KamusBahasaBatakToba.exe&filesize=548.00 KB&product_title=KamusBahasaBatakToba.exe&installer_file_name=KamusBahasaBatakToba.exe&product_file_name=KamusBahasaBatakToba.exe&product_download_url=http://www.ziddu.com/store/temp5/2011/4/5/D//1302020301_KamusBahasaBatakToba.exe  (kamusbahasabataktoba.exe.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298/?product_name=lescodesdelaroute.rar&filesize=2.74 MB&product_title=lescodesdelaroute.rar&installer_file_name=lescodesdelaroute.rar&product_file_name=lescodesdelaroute.rar&product_download_url=http://www.ziddu.com/store/temp2/temp1/temp3/2010-5-27/D//1274963268_lescodesdelaroute.rar&uuid=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  (lescodesdelaroute.rar.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298/?product_name=lescodesdelaroute.rar&filesize=2.74 MB&product_title=lescodesdelaroute.rar&installer_file_name=lescodesdelaroute.rar&product_file_name=lescodesdelaroute.rar&product_download_url=http://www.ziddu.com/store/temp2/temp1/temp3/2010-5-27/D//1274963268_lescodesdelaroute.rar  (lescodesdelaroute.rar.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298?product_name=lescodesdelaroute.rar&filesize=2.74 MB&product_title=lescodesdelaroute.rar&installer_file_name=lescodesdelaroute.rar&product_file_name=lescodesdelaroute.rar&product_download_url=http://www.ziddu.com/store/temp2/temp1/temp3/2010-5-27/D//1274963268_lescodesdelaroute.rar  (lescodesdelaroute.rar.exe)

1 / 68      (Adware)
http://www.safecanadapro.info/v298?product_name=flashdisklock.rar&filesize=85.07 KB&product_title=flashdisklock.rar&installer_file_name=flashdisklock.rar&product_file_name=flashdisklock.rar&product_download_url=http://www.ziddu.com/store/temp1/temp3/temp2/temp4/D/2009-4-30//1241067521_flashdisklock.rar  (flashdisklock.rar.exe)

The following 2 files have been seen to comunicate with www.safecanadapro.info in live environments.

TCP » 69.172.201.208:80
douga_dl.crx

TCP » 69.172.201.208:80
maldistream.crx

URL:
http://www.safecanadapro.info/

Web server:
nginx/1.7.5

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.