download-file.downloadinfo.co
Downloadinfo (via a Proxy Registrant)
Domain Information
Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain download-file.downloadinfo.co is registered by proxy through GODADDY.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in West McLean, Virginia within the United States which resides on the Latin American and Caribbean IP address Regional Registry network. The domain is associated with the publisher Downloadinfo who is located in SAN FRANCISCO, California in the United States.
Registrar:
GODADDY.COM, INC.
Server location:
Virginia, United States (US)
Create date:
Thursday, September 27, 2012
Expires date:
Monday, September 26, 2016
Updated date:
Sunday, September 27, 2015
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Adlogica.QuickDow.Bundler (M), PUP.Adlogica.SoftDown.Bundler (M), PUP.Adlogica.FastDown.Bundler (M), PUP.installCore.BabelSof.Installer (M), PUP.Outbrowse.Bundler (M), PUP.Adlogica.Download.Bundler (M), PUP.Adlogica (M)
100.00%
avast!
Win32:OutBrowse-AR [PUP], Win32:OutBrowse-G [PUP]
4.00%
ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application, Win32/OutBrowse.AA potentially unwanted application
4.00%
Dr.Web
Trojan.InstallCore.1903, Adware.Downware.2081
4.00%
AVG
Adware InstallCore.ADF
2.00%
Microsoft Security Essentials
Threat.Undefined
2.00%
The domain download-file.downloadinfo.co has been seen to resolve to the following 13 IP addresses.
cf-190-93-250-180.cloudflare.com
November 3, 2014
cf-190-93-251-180.cloudflare.com
November 3, 2014
cf-190-93-255-131.cloudflare.com
October 19, 2014
cf-190-93-254-131.cloudflare.com
October 19, 2014
File downloads found at URLs served by download-file.downloadinfo.co.
URL:
http://download-file.downloadinfo.co/
Title:
“DownloadInfo - DownloadInfo”
SSL certificate subject:
CN=ssl255688.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
cloudflare-nginx (PHP/5.5.9-1ubuntu4)
