home

downchs.data-downloads.com

Alycia Hoversten

Domain Information

The domain downchs.data-downloads.com registered by Alycia Hoversten was initially registered in July of 2015 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the PSINet, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Georgia, United States (US)

Create date:
Wednesday, July 1, 2015

Expires date:
Friday, July 1, 2016

Updated date:
Wednesday, October 14, 2015

ASN:
AS174 COGENT-174 - Cogent Communications,US

Root domain:
data-downloads.com

Whois:
1 data-downloads.com record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.Installe.Installer (M), PUP.Vittalia.Software.Installer (M), PUP.Air Software.Download.Bundler (M), PUP.Vittalia (M), PUP.AirSoftware.Bundler (M), PUP.Air Software (M)
100.00%

Dr.Web
Adware.Downware.13038
2.04%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
2.04%

The domain downchs.data-downloads.com has been seen to resolve to the following 3 IP addresses.

50.63.202.55
ip-50-63-202-55.ip.secureserver.net
July 9, 2016

38.87.44.150
ssd1003.poweruphosting.com
May 15, 2016

159.203.107.180
fd-03-do-e-ny-3.gtdlrfwd.com
April 21, 2016

File downloads found at URLs served by downchs.data-downloads.com.

1 / 68      (PUP)
http://downchs.data-downloads.com/v2/click/44903d21/?d=http://en-softs.com/.../File_Downloader.exe&key=7b8b390e883082c3d768688c78f45d0d270add40d5ea785a5ebd8dde77cf02e7&sid=&uid=&affiliate_image=http://en-softs.com/.../logo.png&product_image=http://en-softs.com/.../product.png&n=File Downloader&filename=setup  (setup.exe)

1 / 68      (Adware)
http://downchs.data-downloads.com/v2/click/c7cbbd8e/?affiliate_image=http://en-softs.com/.../logo.png&d=http://en-softs.com/.../File_Downloader.exe&filename=setup&key=7b8b390e883082c3d768688c78f45d0d270add40d5ea785a5ebd8dde77cf02e7&n=File Downloader&product_image=http://en-softs.com/.../product.png&sid=&uid=&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNDkuMC4yNjIzLjg3IFNhZmFyaS81MzcuMzY_&scid=f35155dc-f06f-11e5-9554-0401ac006801  (setup.exe)

1 / 68      (PUP)
http://downchs.data-downloads.com/v2/click/c7cbbd8e/?affiliate_image=http://en-softs.com/.../logo.png&d=http://en-softs.com/.../File_Downloader.exe&filename=setup&key=7b8b390e883082c3d768688c78f45d0d270add40d5ea785a5ebd8dde77cf02e7&n=File Downloader&product_image=http://en-softs.com/.../product.png&sid=&uid=&uao=TW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNi4yOyBlbi1VUykgQXBwbGVXZWJLaXQvNTM0LjEzIChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzkuMC41OTcuODQgU2FmYXJpLzUzNC4xMw__&scid=1c729d10-f0af-11e5-95a8-0401ac006801  (4vs4vooy.exe)

3 / 68      (Adware)
http://downchs.data-downloads.com/v2/click/c7cbbd8e/?d=http://en-softs.com/.../File_Downloader.exe&key=7b8b390e883082c3d768688c78f45d0d270add40d5ea785a5ebd8dde77cf02e7&sid=&uid=&affiliate_image=http://en-softs.com/.../logo.png&product_image=http://en-softs.com/.../product.png&n=File Downloader&filename=setup  (kik for computer setup-efb5180a561c2ec1.exe)

The following 992 files have been seen to comunicate with downchs.data-downloads.com in live environments.

TCP » 50.63.202.55:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 50.63.202.55:80
cinemap-1.4cv29.12-codedownloader.exe (CinemaP-1.4cV29.12 by Cinema PlusV29.12)

TCP » 50.63.202.55:80
c48cb716-5749-4da9-8a08-3fba94faf6a6-6.exe (CinemaP-1.9cV19.08 by Cinema PlusV19.08)

TCP » 50.63.202.55:80
hd+v1.0-codedownloader.exe (HD+V1.0 by HDPlusPro)

TCP » 50.63.202.55:80
3e8db241-0a11-4d88-9dd8-ab754af26e88-11.exe (HD-V1.9 by InfoHD-V1.8)

TCP » 50.63.202.55:80
04c29a82-4eb6-4608-b31a-b44c00987862-6.exe (Cinema Plus v6V22.07)

TCP » 50.63.202.55:80
5aba926d-25d2-4a2f-9c93-178df6a11891-6.exe (FileProperties_ProductName by FileProperties_CompanyName)

TCP » 50.63.202.55:80
36316498-b3d9-47dd-98ae-f60936fb007c-6.exe (Apps Hat by Nero)

TCP » 50.63.202.55:80
469fcbcc-315d-4dd5-9804-212abb2e3cb9-6.exe (GoHD by InstallMoon)

TCP » 50.63.202.55:80
e653cf25-f107-4cbe-b8d1-5dadaea354f2-6.exe (CinemaP-1.9cV16.03 by Cinema PlusV16.03)

TCP » 50.63.202.55:80
cc00aed9-b487-4d63-ac9d-3214ac877062-6.exe (Radio Canyon)

TCP » 50.63.202.55:80
c1ebcbec-db2a-4c6a-afa6-48c64e686ed0-6.exe (Cinema Video 1.8V27.02 by Cinema VideoV27.02)

TCP » 50.63.202.55:80
bd3e7e93-2620-40d3-a9fe-c57c4afe4805-6.exe (CinemaPlus-4.2vV13.09 by Cinema PlusV13.09)

TCP » 50.63.202.55:80
07050b38-1064-4757-a89c-fb7383a998f7-6.exe (Apps Hat by Nero)

TCP » 50.63.202.55:80
5577ef12-6393-4c85-bc60-54f4b0b124ab-6.exe (CinemaPlus-3.2cV29.05 by Cinema PlusV29.05)

TCP » 50.63.202.55:80
20b9a285-202b-40f5-8dca-bdb3fa127f47-6.exe (SavePass 1.1 by OB)

TCP » 50.63.202.55:80
1bfece60-b696-439b-ba0a-b7d28f77d3c4-6.exe (Sense by Sense+)

TCP » 50.63.202.55:80
430d7edf-9431-4c38-9d04-b09a003e302a-6.exe (SuperPlusRadio v2.1 by RadioCanyonv2)

TCP » 50.63.202.55:80
object browser-bg.exe (Object Browser)

TCP » 50.63.202.55:80
47e26a51-313e-4f6e-bfba-76003377a4c5-6.exe (I - Cinema by DiscountFrenzy)

 
Latest 20 of 992 files

URL:
http://downchs.data-downloads.com/

Title:
“Welcome to nginx!”

Web server:
nginx/1.4.6 (Ubuntu)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.