home

bluesoleil.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain bluesoleil.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
1 joydownload.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems, PUP.InnovativeSystems.Installer (M)
100.00%

Dr.Web
Threat.Undefined
50.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
50.00%

Clam AntiVirus
Win.Trojan.Agent-803351
50.00%

Malwarebytes
PUP.Optional.OpenCandy
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Trend Micro House Call
ADW_OPENCANDY
50.00%

NANO AntiVirus
Trojan.Win32.OpenCandy.dlsdxl
50.00%

Trend Micro
ADW_OPENCANDY
50.00%

Avira AntiVirus
APPL/Downloader.Gen
50.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
50.00%

McAfee
Artemis!2A2CC871B2C2
50.00%

Baidu Antivirus
Adware.Win32.OpenCandy
50.00%

AVG
OpenCandy
50.00%

The domain bluesoleil.joydownload.com has been seen to resolve to the following 4 IP addresses.

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
April 11, 2016

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
April 11, 2016

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
February 9, 2015

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
February 9, 2015

File downloads found at URLs served by bluesoleil.joydownload.com.

1 / 68      (Adware)
http://bluesoleil.joydownload.com/get_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTiiGxv7cteQv U8/zOh/jwnickFbk3kYqn O3KuyxdSNmmeTbD7Tac8gLNkxcyPVVDUqmynUBOu5Gbr1LKP8oaJxX5KoZQzhVFfVXa5CiBxk8E3/DWvEjaLS/.../o4LhIdMr38FXB eMTcckJhzP21W2NnJJf5kuc0DmOo4AaKybwzWMfkLNClLHta1dPoVal93UgH5tH3jFz4aat2lSqnA8Qe5MSxUTmw54Ob2SYjbaRHRIYvMjwps i1XkM1nB3p3dxPUCbjDB s4IjvhAUiNGCD4TRAgp6QInnrT0LXmqMmPRD7livVDhg0bGhUWg==  (bluesoleil-download-101364-10.0.472.2.exe)

14 / 68    (Adware)
http://bluesoleil.joydownload.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTytCk6rPInBvqA86WT0sDoujo5NchuyMefhayz7nggHYzeRGummG7Mz3rhg2saDAwuT4S3mWQ6iqnD8gfPbvI HzTce44c7wF9BXmSlDj9nn4Aj/.../9ykzhikP Mw1XC0CIxX78exUSu19sTTxXB1PupRTsc3O3Ux9Ka1Fllrjxyi1s9PUCbjDB s4IjvhAUiNGCD4TRAgp6QInnrT0LXmqMmPRD7livVDhg3bWhUWg==  (bluesoleil-download-101364-10.0.472.2.exe)

The following file have been seen to comunicate with bluesoleil.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://bluesoleil.joydownload.com/

Title:
“BlueSoleil - Download BlueSoleil 10 in english on JoyDownload”

Description:
“BlueSoleil introduces a new wireless Bluetooth environment that using Bluetooth, will connect your PC or laptop with a variety of Bluetooth-enabled devices such as mobile phones, cameras, headsets, printers, keyboards, modems, mice, etc - Do...”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Shares:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.