home

www.ez-download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain www.ez-download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
England, United Kingdom (GB)

Create date:
Tuesday, August 21, 2012

Expires date:
Sunday, August 21, 2016

Updated date:
Saturday, August 22, 2015

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.

Root domain:
ez-download.com

Whois:
3 ez-download.com records

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Sophos
Install Core
100.00%

Vba32 AntiVirus
BScope.Malware-Cryptor.InstallCore.2691
100.00%

ESET NOD32
Win32/InstallCore.AY (variant)
100.00%

F-Prot
W32/InstallCore.P.gen
100.00%

Dr.Web
Adware.InstallCore.53
100.00%

VIPRE Antivirus
InstallCore
100.00%

Avira AntiVirus
ADWARE/InstallCore.Gen
100.00%

Trend Micro House Call
TROJ_GEN.RCBH1K9, TROJ_GEN.F47V0926
83.33%

McAfee
Artemis!AFEE33DB5926
66.67%

K7 AntiVirus
Unwanted-Program
66.67%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
66.67%

Fortinet FortiGate
Riskware/InstallCore
66.67%

Comodo Security
UnclassifiedMalware
50.00%

herdProtect (fuzzy)
a variant of cc6200b0d975abdeb2c5efa773ab392df356b925, a variant of 7c0528f0f8b870a4f7e0daeaefa74abeaccefd00
33.33%

Reason Heuristics
PUP.Installer.SecureInstaller.S
33.33%

The domain www.ez-download.com has been seen to resolve to the following 5 IP addresses.

190.93.240.5
(CloudFlare)
February 7, 2014

190.93.242.5
February 7, 2014

141.101.112.6
February 7, 2014

190.93.243.5
February 7, 2014

190.93.241.5
February 7, 2014

File downloads found at URLs served by www.ez-download.com.

0 / 68
http://www.ez-download.com/download.php?file=firefox  (firefox setup 16.0.1.exe)

14 / 68    (PUP)
http://www.ez-download.com/download.php?file=firefox  (firefox_setup_16.0.exe)

9 / 68      (PUP)
http://www.ez-download.com/download.php?file=firefox  (firefox_setup_16.0.1.exe)

14 / 68    (PUP)
http://www.ez-download.com/download.php?file=firefox  (firefox_setup_15.0.1.exe)

13 / 68    (PUP)
http://www.ez-download.com/download.php?file=firefox  (firefox_setup_15.0.1.exe)

13 / 68    (PUP)
http://www.ez-download.com/download.php?file=firefox  (icreinstall_firefox_setup_17.0.exe)

11 / 68    (PUP)
http://www.ez-download.com/download.php?file=firefox  (firefox_setup_16.0.2.exe)

0 / 68
http://www.ez-download.com/download.php?file=firefox  (firefox setup 17.0.exe)

Facebook:
Likes:  4
Shares:  10
Comments:  3

Twitter:
Shares:  3

Quantcast US:
Rank:  61,020

Statistics are for the previous month.

browsersinfo.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.