itunes.download-file.windownload.net

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain itunes.download-file.windownload.net is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Strasbourg, Alsace within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Alsace, France (FR)

Create date:
Tuesday, February 4, 2014

Expires date:
Saturday, February 4, 2017

Updated date:
Tuesday, December 9, 2014

ASN:
AS8972 PLUSSERVER-AS PlusServer AG,DE

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Adlogica.SoftDown.Bundler (M), PUP.Adlogica.FastDown.Bundler (M), PUP.Adlogica.QuickDow.Bundler (M), PUP.InstallCore.EST (M), PUP.Adlogica (M)
100.00%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application, Win32/InstallCore.MM potentially unwanted application
4.08%

Dr.Web
Trojan.InstallCore.1903
2.04%

AVG
Adware InstallCore.ADF
2.04%

avast!
Win32:PUP-gen [PUP]
2.04%

The domain itunes.download-file.windownload.net has been seen to resolve to the following 12 IP addresses.

static-ip-62-75-207-166.inaddr.ip-pool.com
January 27, 2016

ec2-54-72-130-31.eu-west-1.compute.amazonaws.com
August 11, 2015

ec2-54-76-3-212.eu-west-1.compute.amazonaws.com
August 11, 2015

May 5, 2015

May 5, 2015

cf-190-93-249-105.cloudflare.com
September 30, 2014

cf-190-93-248-105.cloudflare.com
September 30, 2014

July 23, 2014

July 23, 2014

July 23, 2014

(CloudFlare)
July 23, 2014

July 23, 2014

File downloads found at URLs served by itunes.download-file.windownload.net.

1 / 68      (Adware)

1 / 68      (Adware)

3 / 68      (PUP)

1 / 68      (Adware)

URL:
http://itunes.download-file.windownload.net/

Title:
“ ”

Description:
“F70 33:47 - After School 32:26 , Is Over 5:10 TB- SPCL 1 1:71:29 26:18 - 1:97:24 JK 2:36 ”

Web server:
nginx/1.0.15 (PHP/5.3.3)