downloads.airdwnlas.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain downloads.airdwnlas.com is registered by proxy through ENOM, INC. and was originally registered in November of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Thursday, November 21, 2013

Expires date:
Friday, November 21, 2014

Updated date:
Thursday, November 21, 2013

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DownloadManager.T
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

Dr.Web
Trojan.SMSSend.5121
100.00%

ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
100.00%

Bkav FE
HW32.CDB
100.00%

Malwarebytes
PUP.Optional.AirAdInstaller
100.00%

Zillya! Antivirus
Adware.AirAdInstaller.Win32.199
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Riskware.Win32.AirAdInstaller.dafqnz
100.00%

Kaspersky
not-a-virus:AdWare.Win32.AirAdInstaller
100.00%

Agnitum Outpost
PUA.AirAd
100.00%

Sophos
AirInstaller
100.00%

Comodo Security
Application.Win32.AirInstaller.JSUE
100.00%

Avira AntiVirus
TR/Rogue.11466095
100.00%

Vba32 AntiVirus
AdWare.AirAdInstaller
100.00%

The domain downloads.airdwnlas.com has been seen to resolve to the following IP address.

173.192.195.226-static.reverse.softlayer.com
August 22, 2014

File downloads found at URLs served by downloads.airdwnlas.com.

URL:
http://downloads.airdwnlas.com/

Title:
“Air Installer ™”

Description:
“Air Installer”

Web server:
Apache/2.2.22 (Ubuntu) (PHP/5.4.31-1+deb.sury.org~precise+1)