» www.oneclickdownload.co
Overview
Analysis
IPs Addresses (9)
Downloads (99)
Network (4)
Website Detail

www.oneclickdownload.co

PrivacyProtect.org (Proxy Registrant)

Domain Information

The domain www.oneclickdownload.co is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.

Registrant:

PrivacyProtect.org

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Virginia, United States (US)

Create date:

Saturday, August 24, 2013

Expires date:

Sunday, August 23, 2015

Updated date:

Tuesday, May 6, 2014

ASN:

AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

oneclickdownload.co

Whois:

3 oneclickdownload.co records

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.TerraFir.Installer (M), PUP.CoolMirage.Installer (M), Adware.1ClickDownload.ET (M), PUP.OneClickDownload (M), PUP (M)

97.96%

ESET NOD32

Win32/Adware.1ClickDownload.AN application

14.29%

AVG

Adware AdInstaller.OneClickDownload

6.12%

VIPRE Antivirus

Threat.4784938

6.12%

Dr.Web

Trojan.DownLoader6.37863, Detection.Undefined

4.08%

avast!

Win32:Malware-gen

2.04%

The domain www.oneclickdownload.co has been seen to resolve to the following 9 IP addresses.

54.84.235.247

ec2-54-84-235-247.compute-1.amazonaws.com

October 20, 2015

54.210.185.57

ec2-54-210-185-57.compute-1.amazonaws.com

October 20, 2015

107.23.244.179

ec2-107-23-244-179.compute-1.amazonaws.com

October 13, 2015

54.172.85.199

ec2-54-172-85-199.compute-1.amazonaws.com

October 13, 2015

52.20.6.218

ec2-52-20-6-218.compute-1.amazonaws.com

September 12, 2015

52.20.252.132

ec2-52-20-252-132.compute-1.amazonaws.com

September 12, 2015

69.172.201.208

September 27, 2014

176.74.176.178

May 31, 2014

176.74.176.179

February 20, 2014

File downloads found at URLs served by www.oneclickdownload.co.

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m10=magnet:?xt=urn:btih:75900610DB1B804864C1BC01C76F5AFAB12B1575&dn=va billboard hot 100 07 28 2012&tr=udp://.../announce&dn=VA-Billboard Hot 100 07-28-2012&tr=&name=VA-Billboard Hot 100 07-28-2012&sp=1 ({blocked}.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=ap180915&fileName=http://.../download.php?id=7941533&name=Lemaitre - Relativity 2 (EP - 2012) {320 kbps}&sp=1 (lemaitre_-_relativity_2_(ep_-_2012)_{320_kbps}.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=1337x&fileName=http://torrage.com/.../0A72871D3532C7BBC4B78939800DA65455134FE9.torrent&name=Magic Mike 2012 720p Bluray Pankhabd (magic_mike_2012_720p_bluray_pankhabd.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m1=http://www.mnova.eu/download/torrent/3473318/2010-01-25/.../Les_bagnoles_2006_Disney_Pixart_French.torrent&name=&sp=1&note=1 (les_bagnoles_2006_disney_pixart_french.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/.../product_download.php?m7=magnet:?xt=urn:btih:P4LD53RZEM7Y2GWVISZ5QTYLNCFRHXO5&name=TED_2012_FULLCAM_x264_KiNGDOM&sp=1&note=1 (ted_2012_fullcam_x264_kingdom.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=dl.to&fileName=http://.../1734544.torrent&name=Ted_2012_CAM_XviD-playXD.exe (782b45fbc9c4c8b9f9fe173e755fa6c3)

1 / 68 (Adware)

http://www.oneclickdownload.co/.../product_download.php?pub=tload&fileName=&name=the hunger games (the_hunger_games.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=tfunk&fileName=http://www.torrentfunk.com/.../4266873.torrent&name=the-hunger-games-2012-dvdrip-movie-torrentz-movie-torrentz (the-hunger-games-2012-dvdrip-movie-torrentz-movie-torrentz.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m6=magnet:?xt=urn:btih:6EEDLTSJ6CZOT4TTSGGATNEAJSB3FAYN&tr=http://inferno.demonoid.com:3392/announce&tr=udp://tracker.ccc.de:80/announce&tr=udp://tracker.publicbt.com:80/announce&tr=udp://.../announce&name=frogger_2 (downloadsetup.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/.../product_download.php?m7=magnet:?xt=urn:btih:VD2VY4KZJ27HRII63YPJP5HZCMND3F7B&name=Escobar_El_Patron_Del_Mal_Capitulo_58_HD_2012_08_23_mkv&sp=1&note=1 (escobar_el_patron_del_mal_capitulo_58_hd_2012_08_23_mkv.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=tbit&fileName=http://www.torrentbit.net/.../1555143&name=Embird 2010 build 8.7 by kumnala11 (embird_2010_build_8.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/.../product_download.php?m7=magnet:?xt=urn:btih:34OVDKE4TPL7H55GIHDUW2H5Q7UEQQB2&name=shanky_technogies_poker_bot_zip&sp=1&note=1 (downloadsetup.exe)

5 / 68 (PUP)

http://www.oneclickdownload.co/download/product_download.php?m10=magnet:?xt=urn:btih:CE1FC50BFFB09962BE8F3C49478CBEB65E2AFE0F&dn=fast and furious 5 fast five 2011 dvdrip xvid maxspeed&tr=http://.../announce&dn=Fast and Furious 5 Fast Five (2011) DVDRip XviD-MAXSPEED&tr=&name=Fast and Furious 5 Fast Five (2011) DVDRip XviD-MAXSPEED&sp=1 (fast_and_furious_5_fast_five__dvdrip_xvid-maxspeed.exe)

4 / 68 (PUP)

http://www.oneclickdownload.co/download/product_download.php?m10=magnet:?xt=urn:btih:A9AC69A718A352DD1F7D8BE2A589391585755716&dn=the avengers 2012 ts xvid ac3 adtrg&tr=http://.../announce&dn=The Avengers 2012 TS XviD AC3 ADTRG&tr=&name=The Avengers 2012 TS XviD AC3 ADTRG&sp=1 (the_avengers_2012_ts_xvid_ac3_adtrg.exe)

2 / 68 (PUP)

http://www.oneclickdownload.co/.../product_download.php?m7=magnet:?xt=urn:btih:3H3XDGJC2AGU6KXFTRIU3QVO46RJHDOJ&name=The_Hunger_Games_2012_DVDRip_XviD_MAXSPEED&sp=1&note=1 (the_hunger_games_2012_dvdrip_xvid_maxspeed.exe)

3 / 68 (PUP)

http://www.oneclickdownload.co/download/product_download.php?m6=magnet:?xt=urn:btih:W3YFLU662VZ37QVMVT4HVYHYHDCSE6ZZ&tr=udp://tracker.istole.it:80/announce&tr=http://exodus.desync.com:6969/announce&tr=http://9.rarbg.com:2710/announce&tr=udp://tracker.ccc.de:80/announce&tr=http://.../announce&name=Rockstar__2011__Exclusive_Mp3_Ringtones__AbhinavRocks____HKRG___ (rockstar__2011__exclusive_mp3_ringtones__abhinavrocks____hkrg___.exe)

1 / 68 (Adware)

2 / 68 (PUP)

http://www.oneclickdownload.co/download/product_download.php?pub=publi&fileName=http://.../download.php?id=5ab0099b910b86ffd22bd468a6e7e31a4ee9d1fa&name=Clash_of_the_Titans_(2010)_720p_BrRip_x264_-_799.exe (clash_of_the_titans__720p_brrip_x264_-_799.exe)

3 / 68 (PUP)

http://www.oneclickdownload.co/download/product_download.php?pub=h33t.&fileName=http://.../download.php?id=07f4663c1a3481e4b8a766848dfe8fe57ee3191f&name=Total_Recall_2012_TS_XviD-ILLUMINATI.exe (9500f337feeef5dd4c3949f6ae2a1dee)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?furl=http://torrage.com/.../899177468765C3C8D76C7F886C79DE0C6CAB34DD.torrent&name=Ultimate Clubland A Decade In Dance 4cd 2012 Covers 320 Bsbtrg (ultimate_clubland_a_decade_in_dance_4cd_2012_covers_320_bsbtrg.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=extr1&fileName=http://extratorrent.com/download/.../Battleship (2012) BDRIP - WatchMan.torrent&name=&sp=1 (battleship__bdrip_-_watchman.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=extr1&fileName=http://extratorrent.com/download/.../Step Up 4 3D 2012 TS (300MB) x264 AAC NimitMak SilverRG.torrent&name=&sp=1 (step_up_4_3d_2012_ts_(300mb)_x264_aac_nimitmak_silverrg.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=extr1&fileName=http://extratorrent.com/download/.../IN THE REALM OF THE HACKERS.KZ.torrent&name=&sp=1 (in_the_realm_of_the_hackers.kz.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/.../product_download.php?pub=bits2&fileName=magnet:?xt=urn:btih:3924a808a2469cadef2b427bf7d8ded23a95c1f0&name=??????? ??????????&sp=1 (downloadsetup.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m6=magnet:?xt=urn:btih:QOLS2G2H4VZGR4IWFK56WRAHT32VKBOO&tr=udp://tracker.istole.it:80/announce&tr=http://tracker.torrentbay.to:6969/announce&tr=udp://tracker.publicbt.com:80/announce&tr=udp://tracker.ccc.de:80/announce&tr=http://www.h33t.com:3310/announce&tr=http://exodus.desync.com:6969/announce&tr=http://exodus.desync.com/announce&tr=http://tracker.coppersurfer.tk:6969/announce&tr=http://bigtorrent.org:2710/announce&tr=http://php.hdcmct.com:2710/announce&tr=http://bttrack.9you.com/:8080/announce&tr=http://61.154.116.205:8000/announce&tr=http://bt.careland.com.cn:6969/announce&tr=http://www.elitezones.ro/announce.php&tr=http://torrent.falcoware.com/announce.php&tr=http://.../announce.php&name=Windows_7_Ultimate___32_Bit__Auto_Activation____Cracked (windows_7_ultimate___32_bit__auto_activation____cracked.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/.../product_download.php?m7=magnet:?xt=urn:btih:D56UXIEXOAIXMK3AS5DNZ3TSJB2ICVGY&name=NKJV_MP3_Bible&sp=1&note=1 (nkjv_mp3_bible.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m10=magnet:?xt=urn:btih:e8e9b1c7351f92c0eae5d1268e9b733f43c43ab1&dn=pc game doom 3 extract and play&tr=http://.../announce&dn=[PC Game] DOOM 3 (Extract and Play)&tr=&name=[PC Game] DOOM 3 (Extract and Play)&sp=1&note=1 ([pc_game]_doom_3_(extract_and_play).exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m1=http://www.mnova.eu/download/torrent/748776/2008-07-13/.../Luxand_Development_Chord_Pickout_v1_6_WinALL_Cracked-EOF(www_funfile_org).torrent&name=&sp=1&note=1 (luxand_development_chord_pickout_v1_6_winall_cracked-eof(www_funfile_org).exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?m10=magnet:?xt=urn:btih:d87eb9e553ca4dbc5a531dc7ae1ddd064c1512d8&dn=johnny cash unearthed 5 cds&tr=http://.../announce&dn=Johnny Cash Unearthed 5 Cds&tr=&name=Johnny Cash Unearthed 5 Cds&sp=1 (johnny_cash_unearthed_5_cds.exe)

1 / 68 (Adware)

http://www.oneclickdownload.co/download/product_download.php?pub=tfrns&fileName=http://www.torrentfrancais.com/tor/.../kgtzzj12r7urfqvjbgxs42dqirkm.torrent&name=linkin park living things (linkin_park_living_things.exe)

Latest 30 of 99 download URLs

The following 4 files have been seen to comunicate with www.oneclickdownload.co in live environments.

TCP » 176.74.176.178:80

bflix.crx

TCP » 176.74.176.178:80

mytools.crx

TCP » 69.172.201.208:80

douga_dl.crx

TCP » 69.172.201.208:80

maldistream.crx

URL:

http://www.oneclickdownload.co/

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

DOSarrest

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.