The domain click.downloadrockstar.com is registered by proxy through ENOM, INC. and was originally registered in November of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Francisco, California within the United States which resides on the Digital Ocean, Inc. network.
Registrant:
WHOISGUARD, INC.
Server location:
California, United States (US)
Create date:
Friday, November 8, 2013
Expires date:
Sunday, November 8, 2015
Updated date:
Friday, October 10, 2014
ASN:
AS14061 DIGITALOCEAN-ASN - Digital Ocean, Inc.,US
Scanner detections:
Detections (95% detected)
Scan engine
Details
Detections
Reason Heuristics
DownloadManager.AirSoftware.F, DownloadManager.Bundler.Air Software
100.00%
Malwarebytes
PUP.Optional.AirInstaller, PUP.Optional.AirAdInstaller
100.00%
avast!
Win32:Dropper-gen [Drp], Win32:Installer-L [PUP], Adware-gen [Adw], Win32:Adware-gen [Adw], PUP-gen [PUP], Win32:PUP-gen [PUP]
100.00%
Comodo Security
Application.Win32.AirAdInstaller.A, Application.Win32.AirAdInstaller.B, Application.Win32.AirInstaller.JSUE
100.00%
Dr.Web
Trojan.SMSSend.5245, Adware.Downware.5906, Trojan.SMSSend.5379, Trojan.SMSSend.5270, Trojan.SMSSend.5375, Trojan.SMSSend.5348
100.00%
VIPRE Antivirus
Iminent, Threat.4150696, Trojan.Win32.Generic, Threat.5061940, Threat.4848734
100.00%
Sophos
AirInstaller, PUA.AirInstaller, PUA 'AirInstaller'
100.00%
ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
100.00%
Rising Antivirus
PE:PUF.Airinstall!1.9C4C
100.00%
Qihoo 360 Security
HEUR/Malware.QVM01.Gen, Malware.QVM18.Gen
100.00%
Agnitum Outpost
PUA.AirAd, PUA.AirAdInstaller
100.00%
Avira AntiVirus
ADWARE/Adware.Gen, APPL/AirInstaller.F
100.00%
Vba32 AntiVirus
AdWare.AirAdInstaller.ajov
100.00%
AhnLab V3 Security
PUP/Win32.AirAdInstaller
100.00%
IKARUS anti.virus
Win32.AdWare, Win32.Malware, AdWare.SuspectCRC, not-a-virus:AdWare.AirAdInstaller, PUA.AirAdInstaller
100.00%
The domain click.downloadrockstar.com has been seen to resolve to the following IP address.
File downloads found at URLs served by click.downloadrockstar.com.
URL:
http://click.downloadrockstar.com/
Description:
“description”
Web server:
Apache (PleskLin)