home

daemon-tools.ar.downloadable.co

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain daemon-tools.ar.downloadable.co is registered by proxy through ENOM, INC. and was originally registered in June of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Thursday, June 19, 2014

Expires date:
Thursday, June 18, 2015

Updated date:
Tuesday, October 21, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
downloadable.co

Whois:
1 downloadable.co record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SevasS.R
100.00%

McAfee
Artemis!C1E5F78A4378
100.00%

Malwarebytes
PUP.Optional.OpenCandy
100.00%

VIPRE Antivirus
Sevas-S Installer
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

G Data
Win32.Adware.OpenCandy
100.00%

Baidu Antivirus
Adware.Win32.OpenCandy
100.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
100.00%

IKARUS anti.virus
PUA.JoyDownloader
100.00%

AVG
Sevas
100.00%

Trend Micro House Call
TROJ_GEN.F47V0317
100.00%

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Sophos
Generic PUA IA
100.00%

Dr.Web
Adware.Downware.8467
100.00%

The domain daemon-tools.ar.downloadable.co has been seen to resolve to the following IP address.

54.209.211.134
ec2-54-209-211-134.compute-1.amazonaws.com
November 1, 2014

File downloads found at URLs served by daemon-tools.ar.downloadable.co.

21 / 68    (Adware)
http://daemon-tools.ar.downloadable.co/get_file/wUiS4WnYccXBwj sXP7oQkEsm10kPjqnChOxatjZp7VvsTDsqSt4ydgEPxO2PeajYW74nwsEcX6IBe2vBrQplvE11s3eDQ b7WyhWFT84XG iP6SpNrSgyMS9Yc7wF9BXmSmCD5nn4Aj/CHoBSCLS/.../juEyIke4f61ek3DmL5uFvPlu04XdH9LJPnKjMAzcr F gmlQ9BvN2g0gblKvUqy2 0CIxX6M2pFSa158TSiCdjbbRJV4A5K3RguuCtD14lnB3z3dxOAS3zDU75oJD2nlZxLHmHsmgez9jUInnl  (daemon-tools-4.48.1.exe)

URL:
http://daemon-tools.ar.downloadable.co/

Google Analytics:
UA-39421699

Title:
“DAEMON Tools Lite - Download DAEMON Tools Lite 4.48 in english on Downloadable”

Description:
“DAEMON Tools Lite  - برنامج مجانى لإنشاء وتشغيل الملفات الإفتراضية iso, يمكنك البرنامج من إنشاء نسخة إفتراضيه لإسطوانات CD/DVD بكل سهولة, ويقوم بتشغيلها كأنها إسطوانات حقيقيه, ويمكنك هذا البرنامج من الإحتفاظ بنسخة من إسطواناتك المدمجه عل...”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.6 (PHP/5.5.9-1ubuntu4)

Facebook:
Shares:  2

Statistics are for the previous month.

joydownload.co

joydownload.com

joydownload.com.br

joydownload.fr

joydownload.it

joydownload.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.