download.download-405.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain download.download-405.com is registered by proxy through ENOM, INC. and was originally registered in October of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network.
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Wednesday, October 7, 2015

Expires date:
Friday, October 7, 2016

Updated date:
Thursday, October 29, 2015

ASN:
AS393406 DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.Installe.Installer (M), PUP.Air Software.DownloadAssistant.Bundler (M), PUP.Air Software.Download.Bundler (M), PUP.Vittalia.Software.Installer (M), PUP.Air Software (M)
96.43%

Dr.Web
Adware.Downware.13038, Win32.Sector.30
7.14%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.57%

Microsoft Security Essentials
Threat.Undefined
3.57%

Emsisoft Anti-Malware
Win32.Sality
3.57%

avast!
Win32:SaliCode
3.57%

F-Secure
Win32.Sality.3
3.57%

F-Prot
W32/Sality.gen2
3.57%

AVG
Win32/Sality
3.57%

Norman
Win32.Sality.3
3.57%

McAfee
Virus.W32/Sality.gen.z
3.57%

Kaspersky
Virus.Win32.Sality
3.57%

ESET NOD32
Win32/Sality.NBA virus
3.57%

The domain download.download-405.com has been seen to resolve to the following 3 IP addresses.

August 24, 2016

dygajj.responseil.com
July 5, 2016

fd-03-do-e-ny-3.gtdlrfwd.com
February 6, 2016

File downloads found at URLs served by download.download-405.com.

URL:
http://download.download-405.com/

Title:
“Welcome to nginx!”

Web server:
nginx/1.4.6 (Ubuntu)