getfastddl.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain getfastddl.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Thursday, May 14, 2015

Expires date:
Saturday, May 14, 2016

Updated date:
Thursday, June 4, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Amonetize (M), PUP.Amonetize (M), Adware.Amonetize.Bundler (M), Adware.Amonetize.Installer.Meta (M), Adware.Amonetize.Meta (M)
73.91%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
30.43%

Dr.Web
infected with Trojan.Amonetize.2248, infected with Trojan.Amonetize.3647, infected with Trojan.Amonetize.2350, infected with Trojan.Amonetize.4075
28.26%

McAfee
Trojan.Artemis!961E9B52FAF8, Program.Artemis!FF16922ED4A0, Program.Artemis!ABDF43564A87, Trojan.Artemis!BB5A7A628C2A, Program.Artemis!50BF3B42B144
28.26%

AVG
Amonetize, BundleApp
26.09%

Panda Antivirus
PUP/Amonetize, Generic Suspicious, Trj/Genetic.gen, PUP/Multitoolbar
26.09%

Emsisoft Anti-Malware
Application.Bundler.Amonetize.BA, Gen:Variant.Adware.Graftor.194436, Gen:Variant.Application.Graftor.206992, Gen:Application.Imonetize
26.09%

Lavasoft Ad-Aware
Application.Bundler.Amonetize.BA, Gen:Variant.Adware.Graftor.194436, Gen:Variant.Application.Graftor.206992, Gen:Application.Imonetize.2
26.09%

Norman
Application.Bundler.Amonetize.BA, Gen:Variant.Adware.Graftor.194436, Gen:Variant.Application.Graftor.206992, Gen:Application.Imonetize.2
26.09%

ESET NOD32
Win32/Amonetize.EZ potentially unwanted application, Win32/Amonetize.FC potentially unwanted application, Win32/Amonetize.FU potentially unwanted application
23.91%

avast!
Win32:Amonetize-JQ [PUP], Win32:Rootkit-gen [Rtk], Win32:PUP-gen [PUP], Win32:Amonetize-KF [PUP], Win32:Amonetize-JK [PUP]
23.91%

MicroWorld eScan
Application.Bundler.Amonetize.BA, Gen:Variant.Adware.Graftor.194436, Gen:Variant.Application.Graftor.206992, Gen:Application.Imonetize.2
21.74%

Trend Micro House Call
Suspici.DDC462BB, TROJ_GE.42130EE4, TROJ_GE.F7667EE9, TROJ_GE.C504B4C4, TROJ_GE.FFD43CDB, TROJ_GE.7DC53DE5, TROJ_GE.4F1D8E6B
21.74%

Bitdefender
Application.Bundler.Amonetize.BA, Gen:Variant.Adware.Graftor.194436, Gen:Variant.Application.Graftor.206992, Gen:Application.Imonetize.2
21.74%

NANO AntiVirus
Riskware.Win32.Amonetize.dsucco, Riskware.Win32.Amonetize.dsqpul, Riskware.Win32.Amonetize.dtlsmj, Riskware.Win32.Amonetize.dsthcy
21.74%

The domain getfastddl.com has been seen to resolve to the following 4 IP addresses.

ip-50-63-202-56.ip.secureserver.net
December 23, 2015

ec2-52-27-144-71.us-west-2.compute.amazonaws.com
October 6, 2015

ec2-52-2-79-136.compute-1.amazonaws.com
July 15, 2015

ec2-52-26-11-185.us-west-2.compute.amazonaws.com
June 19, 2015

File downloads found at URLs served by getfastddl.com.

1 / 68      (PUP)

 
Latest 30 of 46 download URLs

The following 51 files have been seen to comunicate with getfastddl.com in live environments.

 
Latest 20 of 52 files

URL:
http://getfastddl.com/

Title:
“Google”

Description:
“Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for.”

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

30 of 37 related domains