api.downloadastro.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain api.downloadastro.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the SingleHop, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Illinois, United States (US)

Create date:
Wednesday, August 08, 2012

Expires date:
Sunday, August 08, 2021

Updated date:
Tuesday, May 12, 2015

ASN:
AS32475 SINGLEHOP-INC - SingleHop,US

Root domain:

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.MaxSetup.Z, PUP.SoftInstall.Y, PUP.installCore.Webcelle (M), PUP.installCore.SoftInst (M), PUP.installCore.MaxSetup (M), PUP.installCore (M)
100.00%

F-Prot
W32/InstallCore.R.gen, W32/InstallCore.R4.gen, W32/A-dbe1ec51
21.28%

ESET NOD32
Win32/InstallCore.BL potentially unwanted application, Win32/InstallCore.FD potentially unwanted application, Win32/InstallCore.CH potentially unwanted application
14.89%

Dr.Web
Trojan.MulDrop5.10078, Trojan.Packed.24524
12.77%

VIPRE Antivirus
InstallCore.b, Threat.4150696, Adware.InstallCore
10.64%

Malwarebytes
PUP.Optional.InstallCore, PUP.Optional.InstallCore.A
8.51%

ESET NOD32
Win32/InstallCore.OG (variant), Win32/InstallCore.FD, Win32/InstallCore.CH (variant), Win32/InstallCore.FD potentially unwanted
8.51%

McAfee
Artemis!E5E1C6E19DF4, Artemis!EE88C76A180E, Artemis!E87399F99B98
6.38%

Avira AntiVirus
Adware/InstallCore.OG, APPL/InstallCore.AT.13, PUA/InstallCore.Gen7
6.38%

McAfee Web Gateway
Artemis!E5E1C6E19DF4, Artemis!EE88C76A180E
6.38%

Sophos
Install Core Click run software
6.38%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
6.38%

Vba32 AntiVirus
Downware.InstallCore
4.26%

SUPERAntiSpyware
PUP.InstallCore/Variant
4.26%

Comodo Security
Application.Win32.InstallCore.KAT
4.26%

The domain api.downloadastro.com has been seen to resolve to the following 8 IP addresses.

lb1.forsetup.com
June 18, 2015

f3.foresetup.com
November 29, 2014

lm2200.foresetup.com
November 10, 2014

f1.forsetup.com
August 7, 2014

downloadastro.com
August 1, 2014

serverab.downloadastro.com
May 5, 2014

dc-b90c4e43.downloadastro.com
December 13, 2013

phx1-sha-redirect-lb.cnet.com
August 7, 2013

File downloads found at URLs served by api.downloadastro.com.

3 / 68      (PUP)

1 / 68      (Adware)

 
Latest 30 of 380 download URLs

The following 62 files have been seen to comunicate with api.downloadastro.com in live environments.

 
Latest 20 of 71 files

URL:
http://api.downloadastro.com/

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)