spark-browser.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain spark-browser.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (71% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems.U, PUP.InnovativeSystems.Installer (M), PUP.Innovati.Installer (M)
100.00%

McAfee
Artemis!045AAB13437B, Artemis!C5E8D0BFF605, Artemis!2A2CC871B2C2, Artemis!413A5679F012
80.00%

Malwarebytes
PUP.Optional.OpenCandy
80.00%

Avira AntiVirus
APPL/Downloader.Gen
80.00%

AVG
OpenCandy
80.00%

ESET NOD32
Win32/JoyDownloader
60.00%

Agnitum Outpost
Riskware.Agent
60.00%

Dr.Web
Threat.Undefined, Adware.OpenCandy.55
40.00%

Trend Micro House Call
Suspici.792C221A, Suspicious_GEN.F47V1106
40.00%

Clam AntiVirus
Win.Trojan.Agent-803351
40.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
40.00%

Baidu Antivirus
Adware.Win32.OpenCandy
40.00%

Qihoo 360 Security
HEUR/Malware.QVM06.Gen
20.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
20.00%

The domain spark-browser.joydownload.com has been seen to resolve to the following 8 IP addresses.

ec2-54-204-41-226.compute-1.amazonaws.com
February 28, 2016

ec2-204-236-230-156.compute-1.amazonaws.com
February 28, 2016

ec2-50-19-96-56.compute-1.amazonaws.com
February 22, 2016

ec2-54-225-168-223.compute-1.amazonaws.com
February 22, 2016

ec2-23-23-159-111.compute-1.amazonaws.com
November 29, 2014

ec2-23-21-241-197.compute-1.amazonaws.com
November 29, 2014

ec2-107-22-254-230.compute-1.amazonaws.com
October 20, 2014

ec2-184-73-244-120.compute-1.amazonaws.com
October 20, 2014

File downloads found at URLs served by spark-browser.joydownload.com.

The following file have been seen to comunicate with spark-browser.joydownload.com in live environments.

URL:
http://spark-browser.joydownload.com/

Title:
“Baidu Spark Browser - Download Baidu Spark Browser 33.11 in english on JoyDownload”

Description:
“Baidu Spark Browser is the newest and very fast Internet navigator, loading pages faster than all current browsers, and organizing content in the most customizable way possible - Download Baidu Spark Browser latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  39
Shares:  244
Comments:  9

Statistics are for the previous month.