v4downloadpro.com

Whois Privacy Corp.

Domain Information

The domain v4downloadpro.com registered by Whois Privacy Corp. was initially registered in June of 2014 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
INTERNET.BS CORP.

Server location:
Arizona, United States (US)

Create date:
Monday, June 2, 2014

Expires date:
Tuesday, June 2, 2015

Updated date:
Monday, June 2, 2014

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Trend Micro House Call
Suspicious_GEN.F47V0614, TROJ_GEN.R0CBH06FB14, Suspicious_GEN.F47V0619, Suspicious_GEN.F47V0625, Suspicious_GEN.F47V0623
90.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, not-a-virus:HEUR:AdWare.Win32.Amonetize
90.00%

Bkav FE
HW32.CDB, HW32.Paked
80.00%

Malwarebytes
PUP.Optional.Amonetize
80.00%

avast!
Win32:Amonetize-BX [PUP], Win32:PUP-gen [PUP]
80.00%

ESET NOD32
Win32/Amonetize.AW (variant), Win32/Amonetize.AY (variant), Win32/Amonetize.BI (variant), Win32/Amonetize.BK (variant)
80.00%

MicroWorld eScan
Trojan.GenericKD.1711505, Trojan.GenericKD.1724503, Trojan.GenericKD.1721483, MemScan:Application.Bundler.Amonetize.N, Trojan.GenericKD.1783470
80.00%

Bitdefender
Trojan.GenericKD.1711505, Trojan.GenericKD.1724503, Trojan.GenericKD.1721483, MemScan:Application.Bundler.Amonetize.N, Trojan.GenericKD.1793444
80.00%

Lavasoft Ad-Aware
Trojan.GenericKD.1711505, Trojan.GenericKD.1724503, Trojan.GenericKD.1721483, MemScan:Application.Bundler.Amonetize.N, Trojan.GenericKD.1793444
80.00%

F-Secure
Trojan.GenericKD.1711505, Trojan.GenericKD.1724503, Trojan.GenericKD.1721483, MemScan:Application.Bundler.Amonetize, Trojan.GenericKD.1793444
80.00%

Sophos
Generic PUA EG, Generic PUA IB, Generic PUA LC, Generic PUA JG, Generic PUA HA, Generic PUA FN, Generic PUA FA, Generic PUA GK
80.00%

G Data
Trojan.GenericKD.1711505, Trojan.GenericKD.1724503, Trojan.GenericKD.1721483, MemScan:Application.Bundler.Amonetize, Win32.Application.Amonetize
80.00%

Panda Antivirus
Trj/CI.A, Trj/Chgt.A, Trj/Chgt.C
80.00%

Fortinet FortiGate
Riskware/Amonetize, Adware/Amonetize
80.00%

Baidu Antivirus
Adware.Win32.Amonetize
80.00%

The domain v4downloadpro.com has been seen to resolve to the following 4 IP addresses.

August 12, 2014

August 12, 2014

June 21, 2014

June 21, 2014

File downloads found at URLs served by v4downloadpro.com.

28 / 68    (PUP)

6 / 68      (PUP)
http://v4downloadpro.com/download.php?id=alex2014&title=The-Sims-4-Arrival  (microsoftnetframework563__7934_il5528406.exe)

29 / 68    (PUP)

30 / 68    (PUP)

27 / 68    (PUP)