content.officialopendownloads.com
1&1 Internet Inc. - www.1and1.com
Domain Information
The domain content.officialopendownloads.com registered by 1&1 Internet Inc. - www.1and1.com was initially registered in April of 2014 through 1 & 1 INTERNET AG. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
1&1 Internet Inc. - www.1and1.com
Registrar:
1&1 INTERNET SE
Server location:
Oregon, United States (US)
Create date:
Thursday, April 17, 2014
Expires date:
Sunday, April 17, 2016
Updated date:
Saturday, February 13, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Scanner detections:
Detections (91% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore.SafeDownloads.Installer (M), PUP.installCore.SafeDown.Installer (M), PUP.installCore.SafeDown (M), PUP.installCore (M)
60.00%
VIPRE Antivirus
Threat.4786018, InstallCore
50.00%
ESET NOD32
Win32/InstallCore.RA (variant), Win32/InstallCore.QF (variant), Win32/InstallCore.TL (variant), Win32/InstallCore.TL potentially unwanted (variant)
50.00%
Avira AntiVirus
ADWARE/InstallCore.Gen7, ADWARE/InstallCore.Gen4
40.00%
Trend Micro House Call
Suspicious_GEN.F47V1119, Suspicious_GEN.F47V1217
30.00%
Baidu Antivirus
Adware.Win32.InstallCore
30.00%
Fortinet FortiGate
Riskware/InstallCore
20.00%
ESET NOD32
Win32/InstallCore.PY potentially unwanted application
10.00%
Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
10.00%
Sophos
Generic PUA CG
10.00%
herdProtect (fuzzy)
a variant of a52c7722df67a6a7e1ca280b06d951011f33c774
10.00%
The domain content.officialopendownloads.com has been seen to resolve to the following 15 IP addresses.
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 17, 2016
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 17, 2016
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 13, 2016
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 13, 2016
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 13, 2016
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 13, 2016
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 13, 2016
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 13, 2016
ec2-52-24-62-64.us-west-2.compute.amazonaws.com
November 7, 2015
ec2-54-149-60-150.us-west-2.compute.amazonaws.com
November 7, 2015
ec2-54-148-75-228.us-west-2.compute.amazonaws.com
November 7, 2015
ec2-54-187-120-35.us-west-2.compute.amazonaws.com
December 30, 2014
ec2-54-68-221-84.us-west-2.compute.amazonaws.com
October 24, 2014
File downloads found at URLs served by content.officialopendownloads.com.
The following 6 files have been seen to comunicate with content.officialopendownloads.com in live environments.
