download.ilemiapp.net

Whois Privacy Corp.

Domain Information

The domain download.ilemiapp.net registered by Whois Privacy Corp. was initially registered in December of 2012 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Server location:
Dublin City, Ireland (IE)

Create date:
Sunday, December 23, 2012

Expires date:
Friday, December 23, 2016

Updated date:
Thursday, December 24, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallLab.Q, PUP.CoolMirage.Q, PUP.KanchanaKhiandee.Q, PUP.Installer.VASSANAKONGSOONGNERN.T, PUP.CHUTCHAIKIEWNOY.Q, PUP.Installer.CoolMirage, PUP.CoolMirage.VASSANAKONGSOONGNERN.Installer (M), PUP.CoolMirage.Installer (M), PUP.CHUTCHAIKIEWNOY.Installer (M), PUP.CoolMirage.VASSANAK.Installer (M)
90.91%

NANO AntiVirus
Trojan.Nsis.Yotoon.deckrr
57.58%

Dr.Web
Adware.Downware.8319, Threat.Undefined, Adware.Yontoo.54
54.55%

Sophos
1 Click Downloader, CoolMirage, PUA 'CoolMirage', Generic PUA EG, Generic PUA ME
51.52%

AVG
Generic, MultiBundle
51.52%

Avira AntiVirus
APPL/CoolMirage.Gen, ADWARE/Adware.Gen
45.45%

Kaspersky
not-a-virus:AdWare.NSIS.Yontoo, not-a-virus:Downloader.Win32.TornTV
39.39%

VIPRE Antivirus
CoolMirage Ltd, Threat.4783938
39.39%

K7 AntiVirus
Adware , Riskware
36.36%

Qihoo 360 Security
Malware.QVM06.Gen, Win32/Virus.Adware.47b, HEUR/QVM42.0.Malware.Gen, Win32/Virus.Downloader.e28
30.30%

ESET NOD32
Win32/AdWare.1ClickDownload.AW, Win32/Adware.1ClickDownload.AJ, Win32/Adware.1ClickDownload.AY
27.27%

Baidu Antivirus
Adware.NSIS.Yontoo, Adware.Win32.1ClickDownload
24.24%

G Data
NSIS.Adware.OneClickDownloader, NSIS.Application.BetterMarkIt
21.21%

Panda Antivirus
PUP/MultiToolbar.A, Generic Suspicious
15.15%

Malwarebytes
PUP.Optional.OneClickDownloader.A, PUP.Optional.Yontoo
12.12%

The domain download.ilemiapp.net has been seen to resolve to the following 9 IP addresses.

ns1.ibspark.com
February 11, 2016

ec2-54-246-121-152.eu-west-1.compute.amazonaws.com
November 23, 2015

ec2-54-246-120-161.eu-west-1.compute.amazonaws.com
July 1, 2015

ec2-54-228-201-246.eu-west-1.compute.amazonaws.com
May 4, 2015

ec2-54-217-233-226.eu-west-1.compute.amazonaws.com
May 4, 2015

ec2-50-18-168-176.us-west-1.compute.amazonaws.com
January 15, 2015

ec2-184-169-157-32.us-west-1.compute.amazonaws.com
November 10, 2014

ec2-50-18-172-232.us-west-1.compute.amazonaws.com
September 30, 2014

ec2-54-241-253-59.us-west-1.compute.amazonaws.com
September 7, 2014

File downloads found at URLs served by download.ilemiapp.net.

1 / 68      (Adware)

1 / 68      (Adware)
http://download.ilemiapp.net/.../Neolive_download.exe  (cf76fd02648052d2f33172cc3b5495ca)

1 / 68      (Adware)

The following 142 files have been seen to comunicate with download.ilemiapp.net in live environments.

 
Latest 20 of 154 files

URL:
http://download.ilemiapp.net/

Google Analytics:
UA-48689684

Title:
“ilemiapp.net”

Web server:
nginx

30 of 618 related domains