home

www.1clickmoviedownloader.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.1clickmoviedownloader.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Friday, February 3, 2012

Expires date:
Friday, February 3, 2017

Updated date:
Monday, February 8, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Root domain:
1clickmoviedownloader.com

Whois:
3 1clickmoviedownloader.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CoolMirageltd.V, PUP.CoolMirageltd.O, PUP.CoolMirageltd.E, PUP.CoolMirageltd.BB, PUP.CoolMirage.Installer (M), PUP.CoolMirage (M)
100.00%

VIPRE Antivirus
Threat.4784938
25.00%

Dr.Web
Adware.Downware.902
25.00%

avast!
Downloader-TPG [PUP]
25.00%

ESET NOD32
Win32/Adware.1ClickDownload.W application, Win32/Adware.1ClickDownload.AM application
25.00%

McAfee
Adware-SweetIM
25.00%

Malwarebytes
PUP.BundleInstaller.DW
25.00%

SUPERAntiSpyware
Adware.Downware
25.00%

NANO AntiVirus
Riskware.Nsis.Downware.czyjkl, Trojan.Script.Downware.cujzax
25.00%

Sophos
FT Downloader
25.00%

Comodo Security
Application.Win32.MCool.A
25.00%

Avira AntiVirus
APPL/CoolMirage.Gen6
25.00%

F-Prot
W32/A-951144e2
12.50%

AVG
Adware Skodna.Bundle.B
6.25%

The domain www.1clickmoviedownloader.com has been seen to resolve to the following 6 IP addresses.

192.230.92.93
192.230.92.93.ip.incapdns.net
September 13, 2016

104.130.124.96
May 31, 2016

50.63.202.47
ip-50-63-202-47.ip.secureserver.net
February 12, 2016

54.246.120.161
ec2-54-246-120-161.eu-west-1.compute.amazonaws.com
July 7, 2015

50.18.104.209
ec2-50-18-104-209.us-west-1.compute.amazonaws.com
August 12, 2014

184.169.175.49
ec2-184-169-175-49.us-west-1.compute.amazonaws.com
July 7, 2014

File downloads found at URLs served by www.1clickmoviedownloader.com.

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=The Walking Dead&sp=1  (the_walking_dead.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Pretty Little Liars&sp=1  (pretty_little_liars.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=A Haunted House&sp=1  (a_haunted_house.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Django&sp=1  (django.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=The Warriors&sp=1  (the_warriors.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Catfish The TV Show&sp=1  (catfish_the_tv_show.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Gangster Squad&sp=1  (gangster_squad.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl2&file=http://www.1channel.ch&name=Skyfall&sp=1  (skyfall.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=William And Kate-A Royal Baby Story&sp=1  (william_and_kate-a_royal_baby_story.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=It's a SpongeBob Christmas&sp=1  (it's_a_spongebob_christmas.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=The Mask&sp=1  (the_mask.exe)

1 / 68      (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Star Wars: The Clone Wars&sp=1  (star_wars-_the_clone_wars.exe)

13 / 68    (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Wonders of the Solar System&sp=1  (wonders_of_the_solar_system.exe)

12 / 68    (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Soap&sp=1  (soap.exe)

14 / 68    (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=Kelly's Heroes&sp=1  (kelly's_heroes.exe)

12 / 68    (Adware)
http://www.1clickmoviedownloader.com/download/product_download.php?pub=1chnl&file=http://www.1channel.ch&name=The Almighty Johnsons&sp=1  (the_almighty_johnsons.exe)

The following 9 files have been seen to comunicate with www.1clickmoviedownloader.com in live environments.

TCP » 50.63.202.47:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.47:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.47:25
wrk.exe

TCP » 104.130.124.96:443
translategenius.crx

TCP » 104.130.124.96:443
translategenius.crx

TCP » 104.130.124.96:443
translategenius.crx

TCP » 104.130.124.96:443
translategenius.crx

TCP » 50.18.104.209:80
shakti__remember_shakti.exe

TCP » 50.63.202.47:80
produpd.exe (produpd.exe by Vested Development, Inc)

URL:
http://www.1clickmoviedownloader.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.