dl.airdwnlas.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain dl.airdwnlas.com is registered by proxy through ENOM, INC. and was originally registered in November of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network.
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Thursday, November 21, 2013

Expires date:
Friday, November 21, 2014

Updated date:
Thursday, November 21, 2013

ASN:
AS46652 SERVERSTACK-ASN - ServerStack, Inc.

Root domain:

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
DownloadManager.AirSoftware.F
100.00%

Malwarebytes
PUP.Optional.AirInstaller
100.00%

avast!
Win32:Installer-L [PUP]
100.00%

Comodo Security
Application.Win32.AirAdInstaller.A
100.00%

Dr.Web
Trojan.SMSSend.5157
100.00%

VIPRE Antivirus
Iminent
100.00%

Sophos
AirInstaller
100.00%

ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
100.00%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
100.00%

Qihoo 360 Security
HEUR/Malware.QVM01.Gen
100.00%

Agnitum Outpost
PUA.AirAd
100.00%

Avira AntiVirus
ADWARE/Adware.Gen
100.00%

Vba32 AntiVirus
AdWare.AirAdInstaller.ajov
100.00%

AhnLab V3 Security
PUP/Win32.AirAdInstaller
100.00%

IKARUS anti.virus
Win32.AdWare
100.00%

The domain dl.airdwnlas.com has been seen to resolve to the following 2 IP addresses.

justice.airinstaller.com
September 6, 2014

173.192.195.226-static.reverse.softlayer.com
September 5, 2014

File downloads found at URLs served by dl.airdwnlas.com.

URL:
http://dl.airdwnlas.com/

Title:
“Air Installer ™”

Description:
“Air Installer”

Web server:
Apache/2.2.22 (Ubuntu) (PHP/5.4.31-1+deb.sury.org~precise+1)

30 of 30 related domains