home

flashplayer.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain flashplayer.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Monday, February 6, 2017

Updated date:
Monday, November 9, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
1800download.com

Whois:
2 1800download.com records

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS, PUP.RICHMEDIASYSTEMS.Installer (M), Threat.Win.Reputation.IMP
71.43%

Dr.Web
Adware.Downware.10304, Threat.Undefined
42.86%

VIPRE Antivirus
Sevas-S Installer, Threat.4657539
42.86%

Malwarebytes
PUP.Optional.OpenCandy
28.57%

K7 AntiVirus
Trojan
28.57%

Trend Micro House Call
Suspicious_GEN.F47V0413, Suspicious_GEN.F47V0404
28.57%

Clam AntiVirus
Win.Trojan.Agent-855157
28.57%

Agnitum Outpost
Riskware.Agent
28.57%

G Data
Win32.Adware.OpenCandy
28.57%

AhnLab V3 Security
PUP/Win32.Agent
28.57%

McAfee
Artemis!183A492BF350, Artemis!7800BE45D11B
28.57%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
28.57%

AVG
OpenCandy
28.57%

Panda Antivirus
PUP/OpenCandy, PUP/Multitoolbar
28.57%

Sophos
OpenCandy
14.29%

The domain flashplayer.1800download.com has been seen to resolve to the following 2 IP addresses.

52.10.34.223
ec2-52-10-34-223.us-west-2.compute.amazonaws.com
May 5, 2015

54.200.233.120
ec2-54-200-233-120.us-west-2.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by flashplayer.1800download.com.

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKkEgqrOYjBvqA872/soWtgwJgELk31LuKoLXj/ylJSIGGOHuylGKc8gLNmztTIT0zIvXrqBx/9uX 9gvXQqNrYkWgIq5Y6kRUbAGSsSTRzntEo/i/5WGSLS/.../O IWB5Y2enUhuvClGQhqzRyx19dWR3WiRlGi6t mmx0ufXjFuWAGi4WCcyroGRCU3bhtYkH61yvFQE4nYjlVFpu7wxtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1Ghzga5/Zsekkuzyi93p5iNEKLk31MeW/eyLgnDsObjLPQ6n7SfxigbhnjMWfR0z omy7WCmm6SrQ2qyJsIyQxHFA4p82iUcXHDb SGtnn5oj/y/4UmCbRLtey8yiPTQNevprewoEaqX2XnE8cszENF9mnqqnGCcvaoTg2q4/DWOo6wObjvQvDpC3YsGtfXof1cO3D7ZnjRZW54/.../OW0o8 ikFwgh10Ki3J5OFSbzBw33oJjj1QRmNHPEsnhAhJqTbCPhAAOBmvE8YwPx3zOBWFt2MToDRtj8gBtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnl0kPjijGxr1cteQv c8/zOn/j1gwJgEKUTteuKifDftnAg3ZD/.../zGDUsnsIh9WjwXGmLFuMAnJKjJTxEYrs4PRoLIaS0XHl1aoiXcgkpz6viGDQneoD30 0nBSqwsFDdw7x D9G3d8i8KCgCi576Xvsv3BcT55qoxRihLP9nnHWsAstf58K6RH7gtZrTkC8qde8aEZY2enUhuvCkHghqzRyy3c8AVz7qRQfyqYjl1QRmNHPEsnhAhJqTbCPhAAOBmvE8YwPx3zOBWFt2MToDRtj8gBtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

1 / 68      (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzYdbB479nrj2 /jk7npkcJgTtarHuezeuyxdSM2meGvusW780yasmnZKPDE b SXqDUf2unu4mf6SpN/SgzUU/cFlwUdJF3ykACx0kcI79WjwWGmLH/9Ow4TrMD0VL Bse0dIcL38FXB8ctyXf08wh LuECw3e4bg2q4/.../kSa0As9Z7cW8UXKquZWaiHp5O NRTsc3Onwporb4WkQ90UfkyoQaUGiwWlGc9ca1hFdKfi6V8T9Ww4ybZWCjBkvegug8MFbi3njdBQI JA==  (download-install_flash_player.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEh74coqM6bdjr3f14WJwwckMKVXsK7H9P3mulA0bcj/.../jNAz9KQOnSiV0Pfjf99aRD7livUDhh2MC5NHMijwwFFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKjEgqkOYCGp h152H9qHorlZhKfBu7B 2gbjDkgAgJezbOGu7vG7d3g9Y9h4XJaF3ArkCpVR7p7TPqmf6SpNrSgzoS9Yc7wF9AXmSkCSx 18kv9DmsBT/NFf5Ow4TrNT0Var0gJFsFMaXlEj5tc43EJxEwjbPvUSwncpetkv8 TWO9uEiIxaE4W9X YsntZXBc1dPpRKpkw0xcqMqhn1O7ZKt0nT7wX54etofnEjC88YOb2SYmbaQWDcRkeyoxu7utHB5jhhax1NtDFyeiDA75sdq9kx0ufXjCsngV3d3QMnW6TgLXi/.../e3hdEpSrwhtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylEB3zY9nQsuh152T qHomkphOcRauLfmgLXj/ylVZOHHaR7jkQPVrkvA1htSWRAaS9T27VRLlsyK1iv3a7dPam3EP5Yc7wF9DXmSmGDU2nsAj7G2jDnGSA7ZawtXjNTICarkgJFsFN6XlACMjLdzFZREmj6v2S3hmPNSujYJjUjj56hqTzbY5RpO6OMGsLzEzgoL SYZ1zkx6vNGlkw2wO7h 1CagCd0LsZvvFjv7uNKamCYyZbJRTsc3OnUx8LvzDxEihBC6xdxEFy/.../44JDmzR16fWDP 2AT18uUaSz8GgaemvE8YwH6x3iOUBg KnBdHYOqwRtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylEB3yZNrXt h152b0sC4rn8kFbk3hYqn PXa5wlRKOSCGHeO1Tuprl wi1s3eDQ6b7S38Hk20sni1mayI svT0mlJq4czgEdJF3ylACwq19EivSH9UHHeGeIIl4CiJTxEYrgyJQpbauy3Cis2PYySNBBhhqDlGDRzJNSxia1pXyDv8EjE3/.../IfiF2vi8JuWkD4hZ7JAR4MvMjwptOi1S0M92wS7lNdAECbzX1Ow58u4m2BzYiOH4CpIjJCGcnOvDULfyLoQNEGzgU6GVVtaOCMHCcThlxtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4YtbB6qAk5ib0pWJgjIJQeRigK6n3fHm4ykYOaz/ZCeLkErE0yas5moXZVlDNkHmkXQWv CfuwqCTr96QkmEL4fptwBYWOyf2W1EkzZs3q2OvSGjaSrpW2pKpd25FPas5dhION63 Vnl2eszPLVgojaHuAHJ8O8WugKRwTDWouRnFnf5mFsThIYH2Ly0NlpT/D JnlR8f/8y5n1O7ZKt/hS20CIxX7c2pBSC9oZrTkCoqdbRBQIE/.../rBAfhoZ72zEwvPXjW DNAz9KQOnSiV0DdjPl9bhD7livUDhh2MC5NHMijwwFFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

1 / 68      (Malware)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylEB33Z9XXs h152T qHomkphOcRauLfmgLXj/ylVZOHHaR7jkQPVrkvA1htSWRAaV9T2uVRqiqnD8gfHSpMuBzyAP8Mls7AMeBTX/SmIk3ZZr/yyyWWHZANMBi4S1WGZWOdZjdkARZueiRHE8cszENERhnqqnGCEvasKrj7lqSSqouRnFn/.../86k2UrzLaBznT6kAcpY7MepSDrjsZuC3mgybPVJRI4vOG0o8 ikFwgh10Ki3J5OFSbzBw33oJjj1QRmNHHOqilNicvYaXipTUqegvx1e1SviXWCRhg KnBdHYOrxhtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

1 / 68      (inconclusive)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpyK4fE9rm/4qHpzy98NL0D1Y/j2OXmulgsEZjbOCeLkErc90btk1s3eDQ b7XahWFT8 3G9gefSrcvT0mlNq4dlyxUbFiO1AWd/lccr9y77XWadRbcfwsTrJXRePKs5dhIOO6S0XHh1apGNNBBhhqbuAGF8JtGtlq4nBSqwsVDd2qY4Fpn esSkfXNe2sS/Hfsv3BcR55qr1AStfKE2nSilCd0EsIT/.../OHhrs DnXXU8zVXkuIwVQkOwX1Xt9tKx1QRmNHPEsnhAhJqTbCPhAAOBmvE8YwPx3zOBWFt2MToDRtj8gBtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylEB71Y9zWsuh152f0sDcx2dBNJ0DtevylYSfjhxdKOSCGGOO1W xj0bI5zseVDE b/i/yHhKu zvj2ryU7IXKmiBBoJQ6kQMeBTX/.../Mz4SXvjodXUiCdjbbdJV4UvMjwptOi1S0M92wS7lNdAECbzX1Ow58u4m2BzYiOH4CpIjJCGcnOvDULfyLoQNEGzgU6GVVtaOCMHCcThlxtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4ZNbB47pquHf14WJ2yNEcdBmkLOqgYxzqnAUbaiPQSqDyWrQwi7pihIbyWk/Sq0CpXReY6SLnlaCZ 8vT0mlIq4dw2gFQXzWtDDRnlcMt/.../9jUjj56hqTzbY5RoC2M8itZWMahpWvFqoumRcH74r4iFr4fKE2nSqsEZkCspPuAWvi8JuSkD4iY6RIBo47M212 KL X09zhU 61tlGGijnBQX0opGnzQ0vLDaAqmFX19jZInO6TgLXivBtNkHi3mLdAwAnLiMBQ87ugRtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

2 / 68      (Malware)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnl0kPjijGxr1cteQv c8/zOn/j1gwJgEKUTteuKifDftnAg3ZD/dWLHnROR lvthw46eBUzRkHK7TxKY6Sru5KSI9seN2TZZqtY6gF9QDS/zGDU2nsEj7Cj5SGjaSr5W2oOlJTxEYrg4PRkdOOz9VXBtO5eaNBB7hqDsGWUve4/gl7RhHGL5uFzFjv1uAZe/cNClLHtd38uvSbBn30FEpM2/0UrzLaB0lia0VZMMrZ/7Hyig5tOCkW8qZbxRGscvMjwpt i1WkM/2kn3lM9PUCbnDB l/.../MEClxyqODgsxa3JaF5mtxQ5FVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzYdbB479nrj2 /.../UlK04IjvhAUjNGCS5zZAiJvBOzGiR0vPiv5tYkH61yvFQE4nYjlVFpu7wxtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4Y9bB9rpi/26nqGl6wJgELk31LuKoLXj/ylJSIGGOHuylGKc8gLNjztTdXliD9GzyCkzluXu7iPfWvNKbm2VBs8B4wwwAAWSsUzR0kMEg/S35W2ueS/9WycfrJWNeK/luflFKcfPlXTl1ec/ENE1 3eK8Unp0MdCww Z2BG woAyQwKs5RoC2M8isZWNe29O2XuMglQ9DtNSon1O7ZK52nT7/.../U0WmsZGnzQ0vLC2HqmFX197ZIjXxGxWCz7ltYkH61yvFQE4nYjlVFpu7wxtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

1 / 68      (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzYdbB479nrj2 /jk7npkcJgTta7HueSro0l8bOGWGCeulHbA0w6trh8ybDR7Et2 hThPlsyK1ivHTp9vbkWNDpp5ziVZIRjb Xix 18kv9Dn7WmeaQrtOw4TrND0VK BmPRNWOa7/XTl1esTcYl8wh LuEyw3eZf5kuc2BHvj6w7dl7xmBpivc8G8ZDJW28uvS7B4yg8eroL8hVLqOOp0lzKnbJ4fvZ/.../rAAfh9cW4k1pnLHmHsmkez9vSMGCjCA==  (fp10.1_archive.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv c8/zOn/j1gwJgEKUTteuKifDftnAg3ZD/dWLHnROR lvthw46eBUzRkHK7TxKY6Sru5KSI9seN2TZZqtY6gF9QEi/zGDU2nsUj7Cn4X2abQK5Xi83nPSVRN VmelodOOz9VHBtesrcLVgoj6v2UX9xao6r2 w9BSqwsFDd2Lt D9G3cci8bmNXnMu7F/.../44JDnzR1lZybWsyke29PBMXKsRkPamvE8YwH6x3iOUBg KnBdHYOqwRtFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

16 / 68    (PUP)
http://flashplayer.1800download.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1Ghzga5/Zsekkuzyi93p5iNEKLk31MeW/eyLgnDsObjLPQ6n7SfxigbhnjMWfR0z omy7WCmm6SrQ2qyJsIyQxHFA4p8ziUcCDSK1AX1/ksk7/yv WWGeUrcfwsbhPSVTMfpyc0lGdu2rRHE8cs/PLAl00PCnSmZ5Kcynk/8 TWO5uEiJxat D9G3dsi8bXNZ2sO9D JnlR8f/9e n1O7ZK1/.../XZsCqYSpSDrjsJuCw3V0db0AT4Y3K3wgounkFxxrnEP4l4QGRj7qXwfyp5jtxg4gPHDHsyke39PBdDa6TgLXifBtaBD7livUDhh2MC5NHMijwwFFVQ==  (install_flashplayer17x32pp_mssd_aaa_aih.exe)

URL:
http://flashplayer.1800download.com/

Title:
“Free Internet download for windows - 1800Download.com”

Description:
“Download free Internet from 1800Download.com. The website created to help you enjoy 4shared Desktop, Java Runtime Environment. Safe and 100% virus-free.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.