safedownloadsrus.com
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain safedownloadsrus.com is registered by proxy through ENOM, INC. and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
WHOISGUARD, INC.
Server location:
Virginia, United States (US)
Create date:
Tuesday, August 5, 2014
Expires date:
Friday, August 5, 2016
Updated date:
Tuesday, July 7, 2015
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.SafeUpdateTechnologSafeUpdateTechnology.F, PUP.AdGazelle.Bundler.Installer.Meta (M), PUP.AdGazelle.SafeUpdateTechnologSafeUpdateTechnology.Installer (M), PUP.Outbrowse.BEstinST.Bundler (M), PUP.AdGazelle.SafeUpda.Installer (M), PUP.installCore.Compiler.Installer (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.IMALI.IMALINIM.Installer (M), PUP.AdGazelle (M), PUP.Adknowledge (M)
95.12%
AVG
Generic, Generic36
9.76%
VIPRE Antivirus
AdGazelle, Threat.5063330
7.32%
Avira AntiVirus
Adware/AgentCV.A.7192, ADWARE/Adware.Gen2
7.32%
ESET NOD32
Win32/AdGazelle (variant)
7.32%
McAfee
Artemis!18E8FDDE35A5
2.44%
Trend Micro House Call
Suspicious_GEN.F47V0826
2.44%
Comodo Security
Application.Win32.AgentCV.VDPS
2.44%
Baidu Antivirus
PUA.Win32.AdGazelle
2.44%
Fortinet FortiGate
Riskware/AdGazelle
2.44%
avast!
Win32:Adware-gen [Adw]
2.44%
herdProtect (fuzzy)
a variant of 1d325fa3b396d527903cf89273b8a55a17b0f8dc
2.44%
K7 AntiVirus
Unwanted-Program
2.44%
AegisLab AV Signature
AdWare.W32.iBryte
2.44%
ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
2.44%
The domain safedownloadsrus.com has been seen to resolve to the following 3 IP addresses.
ec2-54-210-67-141.compute-1.amazonaws.com
September 11, 2014
File downloads found at URLs served by safedownloadsrus.com.
URL:
http://safedownloadsrus.com/
Title:
“Alfresco » Login”
Network:
Amazon Web Services (AWS), running an EC2 instance
