download.downloadinfo101.com
Corp New Ventures Services
Domain Information
The domain download.downloadinfo101.com registered by Corp New Ventures Services was initially registered in December of 2015 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrant:
Corp New Ventures Services
Registrar:
JUMPSHOT DOMAINS LLC
Server location:
Arizona, United States (US)
Create date:
Sunday, December 27, 2015
Expires date:
Tuesday, December 27, 2016
Updated date:
Sunday, January 3, 2016
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.SoftDownloads.N, PUP.Installer.SoftDownloads.L, PUP.Installer.installCore, PUP.Adlogica.QuickDownloader.Bundler (M), PUP.Adlogica.SoftDownloads.Bundler (M), PUP.Adlogica.SoftDown.Bundler (M), PUP.Adlogica (M)
100.00%
F-Prot
W32/InstallCore.AC.gen
25.00%
ESET NOD32
Win32/InstallCore.QH (variant)
16.67%
Dr.Web
Trojan.InstallCore.7, Trojan.InstallCore.61
16.67%
ESET NOD32
Win32/InstallCore.QH potentially unwanted application, Win32/InstallCore.WQ potentially unwanted application
16.67%
K7 AntiVirus
Trojan
16.67%
Avira AntiVirus
ADWARE/InstallCore.Gen9, TR/Dropper.Gen
16.67%
NANO AntiVirus
Riskware.Win32.InstallCore.dhpyjp
8.33%
F-Secure
Gen:Variant.Kazy.311539
8.33%
VIPRE Antivirus
Threat.4150696
8.33%
The domain download.downloadinfo101.com has been seen to resolve to the following 3 IP addresses.
File downloads found at URLs served by download.downloadinfo101.com.
The following 2 files have been seen to comunicate with download.downloadinfo101.com in live environments.
URL:
http://download.downloadinfo101.com/
