dl.yesdownloads.com

Air Software

Domain Information

The domain dl.yesdownloads.com registered by BuyBestDomains.com was initially registered in September of 2007 through GODADDY.COM, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.
Registrar:
GODADDY.COM, LLC

Server location:
Dublin City, Ireland (IE)

Create date:
Thursday, September 06, 2007

Expires date:
Tuesday, September 06, 2016

Updated date:
Tuesday, November 03, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
DownloadManager.AirSoftware.M, DownloadManager.AirSoftware.N, DownloadManager.AirSoftware.S, DownloadManager.AirSoftware.R, DownloadManager.AirSoftware.J, DownloadManager.AirSoftware.Z, DownloadManager.AirSoftware.P, DownloadManager.AirSoftware.L, DownloadManager.Bundler.Air Software, PUP.Air Software.AirSoftware.Bundler (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Air Software (M)
95.74%

K7 Gateway Antivirus
Unwanted-Program , Adware
31.91%

K7 AntiVirus
Unwanted-Program , Adware
31.91%

NANO AntiVirus
Riskware.Win32.Downware.cwfgel, Riskware.Win32.AirAdInstaller.daxlrb, Riskware.Win32.AirAdInstaller.dafqnz, Riskware.Win32.AirAdInstaller.cwtrov
31.91%

Sophos
AirInstaller, PUA 'AirInstaller'
31.91%

Dr.Web
Adware.Downware.1167, Adware.Siggen.26340, Trojan.SMSSend.5121, Adware.Downware.963, Trojan.SMSSend.4317, Adware.Downware.897
31.91%

VIPRE Antivirus
AirInstaller, Threat.4782985, Threat.4150696
31.91%

Avira AntiVirus
Adware/AirInst.2556, ADWARE/Adware.Gen7, TR/Rogue.11466095, Adware/AirInst.2557, Adware/Airinstall.J
31.91%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
31.91%

AVG
Generic_r, Adware Generic_r.JA, Adware BundleApp.DY, Crypt2
31.91%

Comodo Security
Application.Win32.AirAdInstaller.A, Application.Win32.AirInstaller.B, Application.Win32.Agent.AJ
29.79%

Jiangmin
AdWare/AirAdInstaller.g, AdWare/AirAdInstaller.an, AdWare/AirAdInstaller.kn, AdWare/AirAdInstaller.ld, AdWare/AirAdInstaller.x
29.79%

ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
29.79%

IKARUS anti.virus
PUA.AirAdInstaller, not-a-virus:AdWare.AirAdInstaller, AdWare.AirInst, AdWare.AdWare.Gen7
29.79%

Panda Antivirus
Adware/AirInstaller
29.79%

The domain dl.yesdownloads.com has been seen to resolve to the following 8 IP addresses.

July 11, 2016

ec2-52-18-157-175.eu-west-1.compute.amazonaws.com
April 18, 2016

April 14, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
April 9, 2016

January 6, 2016

December 2, 2015

July 16, 2015

February 6, 2014

File downloads found at URLs served by dl.yesdownloads.com.

1 / 68      (Adware)
http://dl.yesdownloads.com/.../Internet Explorer.exe  (91c285eb28a1107f64b2745f560144f0)

1 / 68      (Adware)
http://dl.yesdownloads.com/.../Silverlight.exe  (microsoft silverlight.exe)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.yesdownloads.com/.../Microsoft PowerPoint.exe  (46e3f468b46ee06c7712c4b3213b3303)

1 / 68      (Adware)
http://dl.yesdownloads.com/.../Microsoft Word.exe  (a520e472d6899a24a83ea24d4624796b)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.yesdownloads.com/.../Minecraft.exe  (4b963724aadf2fe5d95521aba143225c)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.yesdownloads.com/.../Microsoft Office.exe  (536ede4cc912bf8511a2dc94a88b9d44)

1 / 68
http://dl.yesdownloads.com/.../SkypeSetup.exe  (eca425e76b572f27b41945ed00fc1f9d)

1 / 68      (Adware)
http://dl.yesdownloads.com/.../avc-free.exe  (any video converter.exe)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

25 / 68    (Adware)

20 / 68    (Adware)
http://dl.yesdownloads.com/.../pwhe77.exe  (minitool partition wizard.exe)

25 / 68    (Adware)

22 / 68    (Adware)

19 / 68    (Adware)

The following 219 files have been seen to comunicate with dl.yesdownloads.com in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 224 files

URL:
http://dl.yesdownloads.com/

Google Analytics:
UA-48689684

Title:
“yesdownloads.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx

30 of 633 related domains