download-file.downloadinfo.co

Downloadinfo  (via a Proxy Registrant)

Domain Information

Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain download-file.downloadinfo.co is registered by proxy through GODADDY.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in West McLean, Virginia within the United States which resides on the Latin American and Caribbean IP address Regional Registry network. The domain is associated with the publisher Downloadinfo who is located in SAN FRANCISCO, California in the United States.
Remove Malware from download-file.downloadinfo.co - Powered by Reason Core Security
Registrar:
GODADDY.COM, INC.

Server location:
Virginia, United States (US)

Create date:
Thursday, September 27, 2012

Expires date:
Monday, September 26, 2016

Updated date:
Sunday, September 27, 2015

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Adlogica.QuickDownloader.Bundler (M), PUP.Adlogica.SoftDownloads.Bundler (M), PUP.Adlogica.FastDownloads.Bundler (M), PUP.Adlogica.Downloadinfo.Bundler (M), PUP.Outbrowse.Bundler (M)
97.96%

ESET NOD32
Win32/OutBrowse.AO potentially unwanted application, Win32/InstallCore.QW potentially unwanted application, Win32/InstallCore.OZ potentially unwanted application, Detection.Undefined
28.57%

VIPRE Antivirus
Threat.4786018, Threat.4371328, Threat.4150696, InstallCore
26.53%

Agnitum Outpost
PUA.OutBrowse, PUA.InstallCore
20.41%

Dr.Web
Trojan.Packed.28678, Trojan.Packed.28458, Trojan.InstallCore.7, Trojan.MulDrop5.10078
20.41%

herdProtect (fuzzy)
a variant of cd17dab687cfc4e0044780506b1177d60fc0c3ce, a variant of 1965939452c62907a32a88ceba3b86fad1b5f5bb, a variant of c996bd635ab946b00637f7247ba58e616e4a1528
18.37%

AVG
Generic, Adware InstallCore
16.33%

K7 AntiVirus
Unwanted-Program , Trojan
14.29%

K7 Gateway Antivirus
Unwanted-Program , Trojan
14.29%

Malwarebytes
PUP.Optional.OutBrowse
14.29%

McAfee
Adware-OutBrowse.a, Trojan.Artemis!CC3188BA1014
12.24%

IKARUS anti.virus
PUA.OutBrowse
10.20%

Vba32 AntiVirus
AdWare.OutBrowse
10.20%

Antiy Labs AVL
Trojan/Win32.TSGeneric
10.20%

McAfee Web Gateway
Adware-OutBrowse.a
10.20%

The domain download-file.downloadinfo.co has been seen to resolve to the following 13 IP addresses.

October 29, 2015

October 29, 2015

May 4, 2015

May 4, 2015

cf-190-93-250-180.cloudflare.com
November 3, 2014

cf-190-93-251-180.cloudflare.com
November 3, 2014

cf-190-93-255-131.cloudflare.com
October 19, 2014

cf-190-93-254-131.cloudflare.com
October 19, 2014

May 10, 2014

May 10, 2014

May 10, 2014

May 10, 2014

May 10, 2014

File downloads found at URLs served by download-file.downloadinfo.co.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (inconclusive)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

6 / 68      (Adware)

13 / 68    (Adware)

URL:
http://download-file.downloadinfo.co/

Title:
“DownloadInfo - DownloadInfo”

SSL certificate subject:
CN=ssl255688.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx (PHP/5.5.9-1ubuntu4)

Remove Malware from download-file.downloadinfo.co - Powered by Reason Core Security