teamspeak3.joydownload.ru
Private Person (Proxy Registrant)
Domain Information
The domain teamspeak3.joydownload.ru is registered by proxy through RU-CENTER-RU and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Private Person
Server location:
Virginia, United States (US)
Create date:
Wednesday, May 14, 2014
Expires date:
Saturday, May 14, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.InnovativeSystems.Installer (M)
100.00%
Dr.Web
Threat.Undefined
50.00%
ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
50.00%
VIPRE Antivirus
Threat.4150696
50.00%
McAfee
Trojan.Artemis!C5E8D0BFF605
50.00%
AVG
Adware AdLoad.OpenCandy
50.00%
Malwarebytes
PUP.Optional.OpenCandy
50.00%
K7 AntiVirus
Unwanted-Program
50.00%
Agnitum Outpost
Riskware.Agent
50.00%
Clam AntiVirus
Win.Trojan.Agent-803351
50.00%
Avira AntiVirus
APPL/Downloader.Gen
50.00%
G Data
Win32.Adware.OpenCandy
50.00%
AhnLab V3 Security
PUP/Win32.OpenCandy
50.00%
Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
50.00%
NANO AntiVirus
Riskware.Win32.OpenCandy.cxlnia
50.00%
The domain teamspeak3.joydownload.ru has been seen to resolve to the following 2 IP addresses.
ec2-50-19-96-56.compute-1.amazonaws.com
April 8, 2016
ec2-54-225-168-223.compute-1.amazonaws.com
February 26, 2016
File downloads found at URLs served by teamspeak3.joydownload.ru.
URL:
http://teamspeak3.joydownload.ru/
Title:
“Teamspeak - Скачать Teamspeak 3.016 на русском языке с сайта JoyDownload”
Description:
“TeamSpeak (Тимспик) – программа, предоставляющая возможность голосового общения между пользователями через локальную сеть или Интернет - Скачать здесь Teamspeak последнюю версию.”
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)
