home

facebook-messenger.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain facebook-messenger.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
2 joydownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.InnovativeSystems.W, PUP.InnovativeSystems.Installer (M), PUP.Innovati.Installer (M), PUP (M)
100.00%

McAfee
Artemis!CDCF0EBD49EE, Artemis!2A2CC871B2C2, Artemis!3E0FE49D3DE3
50.00%

Malwarebytes
PUP.Optional.OpenCandy
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Avira AntiVirus
APPL/Downloader.Gen
50.00%

Baidu Antivirus
Adware.Win32.OpenCandy
50.00%

ESET NOD32
Win32/JoyDownloader
50.00%

AVG
OpenCandy
50.00%

Trend Micro House Call
Suspicious_GEN.F47V1114
37.50%

Clam AntiVirus
Win.Trojan.Agent-803351
37.50%

Dr.Web
Adware.OpenCandy.55
37.50%

AhnLab V3 Security
PUP/Win32.OpenCandy
37.50%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
37.50%

NANO AntiVirus
Trojan.Win32.OpenCandy.dlsdxl
25.00%

VIPRE Antivirus
Trojan.Win32.Generic
25.00%

The domain facebook-messenger.joydownload.com has been seen to resolve to the following 4 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
February 28, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
February 28, 2016

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
November 29, 2014

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
November 29, 2014

File downloads found at URLs served by facebook-messenger.joydownload.com.

1 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmEBr6cteQv E8/yG6sGMxwdoEP0b1Y/j2PHmugA0MIGjPEeqtCrQ3xatrh8yeDR7IpnvqBwX9unGtivfDpZrSkmlZ4sxkkV4bXnesSTR0lMk7qnK5Gj/ICfkelNXqdD0GYLMgeUlcZv2oCSFiJZuNZU582/SmAC1mcof4w7J2HGL5uF3Fjrg1WsbiN4G8ZDJW2cuvSKFkxl9A/4Okh1n8bqNwniSgAc5Wrc2/SWu/.../BtawH2xyqa  (facebookmessengersetup.exe)

1 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzaNbB47JluDeh/TNvlo5NbhK5P 6 LXj/yldSICXVT/usW78xyatixseVBQSD9GzyDkzl5zitgLbbqdPK1joV9cp3wEdJF3ylACwx0NEivSH7UHGYUrcfwsTrJXRePKs5dhIOOOz9VXBtIZeaNBBhhqPuACcnao6x2 k/HD/j7g/dl7xmBpS3YpT/PCQOgJ7mQLxn3EhLut2/.../BtaAL2xyqa  (facebookmessengersetup.exe)

17 / 68    (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv U8/zOh/jwnickFbk3kYqn PHWuyxdSMWmeXbDzCr50yb9q1sSfBgST9z3zT0z0smn80qHDpYDSkGgIq5M6kQAKFC/lXyx zcko ir5XWuYRrhVw4TrNjcNeu1rbFhTYuayFCZtc43EJxMonve1QXN3J9qpzLBgTSrv7A2a3u1nR5i5etD4Ni0Jzcr F silQ9DvNuo3wenNfcg1G/.../44JDnzR0kPnTWsyke3tPBaSv8V0qegvh1ewD0xyqa  (facebookmessengersetup.exe)

1 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//qSt4zdEceA nMfmpLXjlylVcMGOFGe iH7w8gLNiztTCRB6avCX/BlSw4SXr1LKSvNKbm2dBs8Np3wBQXzWtCDh/hpV4rX6oBTzCHekfi5K/.../4jvhAUkNnjW7jtHiIuMbym1GBSey68hPleyxyqa  (facebookmessengersetup.exe)

13 / 68    (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymHhH1ZN/Xtuh152P0sD4tl49bb1XsK7H/NWG w1JKOSCGH O1Tuxrlqtrh8yfAQaDqX6rWRSo5yDi3raS 4ePxCEI9NF1w0sXHCO1AX1/.../ounkFxtphATmho4RQXO XRCu9tmnklFyazDWsyke3tPBaSv8V0qegvh1ewD0xyqa  (facebookmessengersetup.exe)

8 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklUwNSrxSUunMoOM7r5jriar/.../Cc5Wrc24SWuv6sWCkW8qYbxRR4Y8MX0rounkFxxrnEP4l4QGRj7qXwfyp5vlwwYgN3bCsyke3tPBaSv8V0qegvh1ewD0xyqa  (facebookmessengersetup.exe)

1 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpyK4fE9rm/9qHpzy90cJgTtbLHuaSrglUZTcWmOHeO1TuRklus/m53AUk/SqnGvWQS07T/6y uE5ozKmiBBop8iwAwWRn3 AD9 18kv9DmvEiPAAulOw57rNjMHYb87LxwLN6S0XHl1aoiXcgkpz6viGDQneoT60 UnBSqwsFDdw7x D9G3d8i8KCgCi576Xvsv3BcW55qk1AzqZel/lSa0As1P5YSxQnnjocXJ2Wx8Nv8GB9gvMjwpseqtD0ww3UPiiIIfDnG0RU6m/.../BtawH2xyqa  (facebookmessengersetup.exe)

17 / 68    (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEh74comb9bp0uHf1 2Jzz9oNL0XmaLn8NDC2wVRSIDfVWKn7SfxygeVyz4WXBgSb7XmpXxOl5yTklqiE7ZqNzzQe44c7wF9BXmTkU2pnn5oj/yC5UGGTUuMf2syiPTANev5rcUxQdOzlXTl1e8TcYEJ2nqqnGCAvaofw0OU3Bnux8VDLlu06Xc7oYsntZXNa1dPrTLpxzUJKttWozhutMP0g1W/zR4od8JLzFmvi8JuWkD52OOoXEMYvMjwps i1HxlnnB3z3d5OAXW4Uh/.../BtaAL2xyqa  (facebookmessengersetup.exe)

8 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhz4coqK6bYk5ib0oG542Y1ffhK1N SnYib/gwEGZTbOWLzjXfUplvE11s3eDQ b7WmhWFT8 3G5gefTrNjQk2tZqtY6gV9QCzW1AX1/k8k7uXKkDjzeA65Xi83gNz0VPOBxb0Reeuq1Cmh0O8TPLhEw2vC3R3R6J97vjLh2TTzk5Q NjvQvDpG3Ypv3O2NXnMu/F/smmw8eroL7h0qtJuos1Xm0CJZX78O6QnzvtZOUnCdjbbBJV9JiZSt28vCsXhBihASy1NtWGG/.../BtaAL2xyqa  (facebookmessengersetup.exe)

13 / 68    (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/.../Zp6BvuXf1 2JzwJgELEfteu lfDPgkR0dcD eEKqtGb090e8xl5PPWFPK4nKtTwWi5izqyefa7dPbm3ES MEiiBZIVny1CDpnn4Aj CHoDyvZGf4J2sy4PTYDabE2Jh4HNa38FXB7ctyYf0d3nqqnGCQjcpekgL5gXDbl6Qea37w5WsXoMoH7KzQcwZT1SPsv3BcT55qr0gSsO hnnG sAMVP7MS9UXKquZOaiHNjdb0AT4M3Kzh67rb4WllzhVW61ddWV2jzDU75opD2xh0ufXjHsnhShI3BOzGiQ0vPivh YQD4xyqa  (facebookmessengersetup.exe)

17 / 68    (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmEBr6cteQv E8/zq9sGMxwdwEPwC Nu jeDCuyxdSMWmeW7DzCr50ybpq1sedAR6avCX6BlSz/Gm0yP/QpMvZg2gIq5M6kQMdCCLySCx 18kq9Dn4WWWLS/.../rBAv5scy1lFp3YS2f5T9XnoyNZyfqBhSZzbphPEqlxyqa  (facebookmessengersetup.exe)

1 / 68      (Adware)
http://facebook-messenger.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklUwNSrxSUunMoOM7r5jriar/D8niZhbaQKndu60amG3g15bOHHPQr21E w9wrIjzsWXFUzIqz3zT0z0smm i/PDpZrSl2lZ9N1w2hcXRn3 AD9xlcMs yz8W2qSA7ZawtW3aGtTPfsgJFsFMKXlVHl5asWNLBkonv6nAC1mcoL4w6psUD3l9Rndl7xmB5ivKZv6fXof1cO3D ghjRZW54r3nxy8fKE2nS2sEc5P5YSxQHP79cjEiCdjbbBJV4Y/.../4jvhAUkNnjW7jtHiIuMbym1GBSey68hPleyxyqa  (facebookmessengersetup.exe)

13 / 68    (Adware)
http://facebook-messenger.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//qSt4zdEcexi7PO6 LXj/yldSIGGPHfusW782w7NykJ/eR1DAtmq6UFT8 3G g//D IiLxDEU/s4t3gABFyP5XWs3hshq9CjwSCPAFK5Xi83iPSUGaL8gJFsFMKXlDyMrasWNLBkonqPgAC1mcob4w6tsWnux8VDJlu1uBpO1csq8ZDJW3cuvQqo2lF4f6oLvygGmOvUy1D6tQMVZ5NXtGiW8oZrTkC4mbaQVFNdoayB867/.../h4agv01Sqa  (facebookmessengersetup.exe)

The following file have been seen to comunicate with facebook-messenger.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://facebook-messenger.joydownload.com/

Title:
“Facebook Messenger - Download Facebook Messenger 2 in english on JoyDownload”

Description:
“Facebook messenger is a free instant messaging service and application, intended to provide text and voice communication - Download Facebook Messenger latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  150
Shares:  413
Comments:  14

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.