download-405.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain download-405.com is registered by proxy through ENOM, INC. and was originally registered in October of 2015. Currently this domain has been known to host various forms of malware. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Wednesday, October 7, 2015

Expires date:
Friday, October 7, 2016

Updated date:
Thursday, October 29, 2015

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.Installe.Installer (M)
100.00%

Dr.Web
Adware.Downware.13038
50.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%

The domain download-405.com has been seen to resolve to the following 3 IP addresses.

August 22, 2016

dygajj.responseil.com
July 5, 2016

get.get-instant.com
November 7, 2015

File downloads found at URLs served by download-405.com.

3 / 68      (Adware)

3 / 68      (Adware)

3 / 68      (Adware)

3 / 68      (Adware)

 
Latest 30 of 37 download URLs

URL:
http://download-405.com/

Title:
“download-405”

Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4 (PHP/5.4.26)