jdownloader.joydownload.com
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain jdownloader.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Monday, March 18, 2013
Expires date:
Saturday, March 18, 2017
Updated date:
Thursday, January 28, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.InnovativeSystems, PUP.InnovativeSystems.Installer (M), PUP.RICHMEDI.Installer (M), PUP.Innovati.Installer (M)
80.00%
Malwarebytes
PUP.Optional.OpenCandy
40.00%
VIPRE Antivirus
Sevas-S Installer
40.00%
K7 AntiVirus
Trojan , Unwanted-Program
40.00%
Trend Micro House Call
Suspici.F4CBE3E4, Suspici.792C221A
40.00%
Clam AntiVirus
Win.Trojan.Agent-855157, Win.Trojan.Agent-803351
40.00%
Dr.Web
Adware.Downware.9759, Adware.OpenCandy.55
40.00%
G Data
Win32.Adware.OpenCandy
40.00%
McAfee
Artemis!C40FC4A0A9DA, Artemis!2A2CC871B2C2
40.00%
ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant), Win32/JoyDownloader
40.00%
Agnitum Outpost
Riskware.Agent
20.00%
Avira AntiVirus
APPL/Downloader.Gen
20.00%
AhnLab V3 Security
PUP/Win32.OpenCandy
20.00%
Baidu Antivirus
Adware.Win32.OpenCandy
20.00%
The domain jdownloader.joydownload.com has been seen to resolve to the following 4 IP addresses.
ec2-50-19-96-56.compute-1.amazonaws.com
March 3, 2016
ec2-54-225-168-223.compute-1.amazonaws.com
March 3, 2016
ec2-23-21-241-197.compute-1.amazonaws.com
May 5, 2015
ec2-23-23-159-111.compute-1.amazonaws.com
May 5, 2015
File downloads found at URLs served by jdownloader.joydownload.com.
The following file have been seen to comunicate with jdownloader.joydownload.com in live environments.
URL:
http://jdownloader.joydownload.com/
Title:
“JDownloader - Download JDownloader 0.9 in english on JoyDownload”
Description:
“JDownloader – free software designed for downloading from such file sharing sites as Megaupload, Rapidshare, and the others - Download JDownloader latest version here.”
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)
Statistics are for the previous month.
