photoscape.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain photoscape.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SevasS.O, PUP.InnovativeSystems.O, PUP.InnovativeSystems.Installer (M), PUP (M)
83.33%

AVG
Generic, OpenCandy, AdLoad.OpenCandy, Win32/Sality
83.33%

McAfee
Artemis!FF65209785ED, Artemis!F35C5C005A46, Artemis!BD92292065B2, Artemis!2488A1CD38F9, Artemis!8E666F0CBA46, Program.Artemis!60262E5CF297
75.00%

Malwarebytes
PUP.Optional.OpenCandy
75.00%

Dr.Web
Adware.Downware.1446, Adware.Downware.6712, Adware.OpenCandy.55, Adware.Downware.5295, Win32.Sector.30
75.00%

Avira AntiVirus
APPL/Sevas.B, APPL/Downloader.Gen, Adware/OpenCandy.481784.2
66.67%

Trend Micro House Call
TROJ_GEN.F47V1214, Suspicious_GEN.F47V0722, Suspici.218D75EB, Suspicious_GEN.F47V1117, Suspicious_GEN.F47V0710
58.33%

ESET NOD32
Win32/JoyDownloader
58.33%

Agnitum Outpost
Riskware.Agent, Riskware.OpenCandy
50.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
50.00%

VIPRE Antivirus
Opencandy, Trojan.Win32.Generic, Threat.4758034
41.67%

Baidu Antivirus
Adware.Win32.OpenCandy
41.67%

avast!
Win32:Adware-gen [Adw], Win32:Sality, Win32:SaliCode
33.33%

K7 AntiVirus
Adware , Unwanted-Program
33.33%

G Data
Win32.Adware.OpenCandy
33.33%

The domain photoscape.joydownload.com has been seen to resolve to the following 10 IP addresses.

ec2-54-225-168-223.compute-1.amazonaws.com
February 8, 2016

ec2-50-19-96-56.compute-1.amazonaws.com
February 8, 2016

ec2-107-21-105-228.compute-1.amazonaws.com
November 13, 2015

ec2-107-20-223-13.compute-1.amazonaws.com
November 13, 2015

ec2-23-21-241-197.compute-1.amazonaws.com
November 29, 2014

ec2-23-23-159-111.compute-1.amazonaws.com
November 29, 2014

ec2-184-73-244-120.compute-1.amazonaws.com
October 20, 2014

ec2-107-22-254-230.compute-1.amazonaws.com
October 20, 2014

ec2-107-22-195-231.compute-1.amazonaws.com
August 23, 2014

ec2-23-23-108-120.compute-1.amazonaws.com
August 23, 2014

File downloads found at URLs served by photoscape.joydownload.com.

10 / 68    (Adware)

 
Latest 30 of 39 download URLs

The following file have been seen to comunicate with photoscape.joydownload.com in live environments.

URL:
http://photoscape.joydownload.com/

Title:
“PhotoScape 3.7 download. Free download PhotoScape 3.7 for windows in english - JoyDownload”

Description:
“PhotoScape is free graphic editor which includes functions of image viewing and editing, batch-mode processing , work with RAW files, making screenshots, etc - Download PhotoScape latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  58
Shares:  285
Comments:  5

Statistics are for the previous month.