download-file.windownload.net

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download-file.windownload.net is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Strasbourg, Alsace within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Alsace, France (FR)

Create date:
Tuesday, February 4, 2014

Expires date:
Saturday, February 4, 2017

Updated date:
Tuesday, December 9, 2014

ASN:
AS8972 PLUSSERVER-AS PlusServer AG,DE

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.QuickDownloader.S, PUP.Installer.QuickDownloader.R, PUP.Installer.QuickDownloader.U, PUP.Installer.QuickDownloader.M, PUP.Installer.Adlogica, PUP.Adlogica.QuickDownloader.Bundler (M), PUP.installCore.OOOTehSnab.Installer (M), PUP.Adlogica.SoftDownloads.Bundler (M), PUP.Adlogica.FastDownloads.Bundler (M), PUP.Adlogica.QuickDow.Bundler (M), PUP.Adlogica.FastDown.Bundler (M), PUP.Adlogica.SoftDown.Bundler (M), PUP.Adlogica (M)
100.00%

VIPRE Antivirus
Threat.4786018, Threat.5063361, InstallCore
44.68%

K7 AntiVirus
Unwanted-Program , Trojan
44.68%

ESET NOD32
Win32/InstallCore.PK potentially unwanted application, Win32/InstallCore.QC potentially unwanted application
42.55%

Sophos
Install Core, PUA 'Install Core', Generic PUA CH
42.55%

Dr.Web
Adware.InstallCore.406, Trojan.Packed.28458, Trojan.InstallCore.37
42.55%

Avira AntiVirus
Adware/InstallCore.A.417, ADWARE/InstallCore.Gen9
40.43%

SUPERAntiSpyware
PUP.InstallCore/Variant
38.30%

Malwarebytes
PUP.Optional.Downloader, PUP.Optional.Downloadster
21.28%

herdProtect (fuzzy)
a variant of a06bf243f99f86f9db5a72c03ebd670348ea4bd5, a variant of 751cd478f8ecb6c3be3d637ffa0681f667095dac, a variant of 31d66574a12ff1bffa49e6443855fe657763657f
17.02%

Comodo Security
Application.Win32.Installcore.PL
17.02%

NANO AntiVirus
Riskware.Text.Drop.deoyhc, Riskware.Win32.InstallCore.dfgmmj
12.77%

F-Prot
W32/InstallCore.AC.gen
12.77%

Clam AntiVirus
Win.Adware.Installcore-548
8.51%

McAfee
Trojan.Artemis!287883BC7233, Trojan.Artemis!191535997293
4.26%

The domain download-file.windownload.net has been seen to resolve to the following 8 IP addresses.

static-ip-62-75-207-166.inaddr.ip-pool.com
January 26, 2016

ec2-54-72-130-31.eu-west-1.compute.amazonaws.com
August 11, 2015

ec2-54-76-3-212.eu-west-1.compute.amazonaws.com
August 11, 2015

July 14, 2014

July 14, 2014

July 14, 2014

(CloudFlare)
July 14, 2014

July 14, 2014

File downloads found at URLs served by download-file.windownload.net.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

12 / 68    (Adware)

12 / 68    (Adware)

9 / 68      (Adware)

 
Latest 30 of 47 download URLs

URL:
http://download-file.windownload.net/

Title:
“| WinDownload - Windownload”

Web server:
nginx/1.0.15 (PHP/5.3.3)