www.downtoad.com
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain www.downtoad.com is registered by proxy through GODADDY.COM, LLC and was originally registered in April of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Beaumaris, Victoria within Australia which resides on the Asia Pacific Network Information Centre network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Victoria, Australia (AU)
Create date:
Monday, April 22, 2013
Expires date:
Friday, April 22, 2016
Updated date:
Thursday, April 23, 2015
ASN:
AS133618 TRELLIAN-AS-AP Trellian Pty. Limited,AU
Scanner detections:
Detections (61% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.installCore, PUP.installCore.DarwenMarketing.Installer (M), PUP.installCore.DarwenMa.Installer (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Air Software.Download.Bundler (M), PUP.installCore.INSTALLM.Installer (M), PUP.Vittalia.InstallA.Installer (M), PUP.Air Software (M)
85.29%
ESET NOD32
Detection.Undefined, Win32/InstallCore.WQ potentially unwanted application, Win32/InstallCore.ACZ potentially unwanted application
14.71%
Dr.Web
Adware.Downware.1417, Trojan.InstallCore.1903
11.76%
ESET NOD32
Win32/OpenCandy (variant), Win32/InstallCore.WC potentially unwanted (variant)
5.88%
Clam AntiVirus
Win.Malware.Agent3850084642/CRDF-1
2.94%
VIPRE Antivirus
Trojan.Win32.Generic
2.94%
Fortinet FortiGate
W32/AdkDLLWrapper.A
2.94%
Bkav FE
W32.Cloddfe.Trojan
2.94%
K7 AntiVirus
Riskware
2.94%
McAfee
Artemis!747317883404
2.94%
Malwarebytes
PUP.Optional.OpenCandy
2.94%
Trend Micro House Call
TROJ_GEN.F47V0125
2.94%
Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
2.94%
Quick Heal
(Suspicious) - DNAScan
2.94%
Baidu Antivirus
Adware.Win32.InstallCore
2.94%
The domain www.downtoad.com has been seen to resolve to the following 3 IP addresses.
lb-182-241.above.com
July 13, 2016
ip-50-63-202-58.ip.secureserver.net
May 17, 2016
aamoiaqmqe.c05.gridserver.com
June 13, 2014
File downloads found at URLs served by www.downtoad.com.
Latest 30 of 135 download URLs
The following 89 files have been seen to comunicate with www.downtoad.com in live environments.
URL:
http://www.downtoad.com/
Title:
“DownToad.com - Free Software Downloads”
