The domain download.downloadstable.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Dublin City, Ireland (IE)
Create date:
Tuesday, February 3, 2015
Expires date:
Friday, February 3, 2017
Updated date:
Tuesday, February 3, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (97% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Outbrowse.Bundler, PUP.installCore.DownloadGuru.Installer (M), PUP.installCore.SoftwareProvider.Installer (M), PUP.installCore.DownloadShip.Installer (M), PUP.installCore.DownloadSmooth.Installer (M), PUP.installCore.SnappyInstall.Installer (M), PUP.installCore.DownloadNozzle.Installer (M), PUP.installCore.Download.Installer (M), PUP.installCore.SnappyIn.Installer (M), PUP.installCore (M)
100.00%
ESET NOD32
Win32/OutBrowse.BU potentially unwanted application, Win32/InstallCore.WQ potentially unwanted application, Win32/InstallCore.YV potentially unwanted application
25.00%
VIPRE Antivirus
Threat.5085447, Threat.4150696, Threat.4786018
25.00%
F-Secure
Dropped:Trojan.Generic.13285151, Adware.Linkury.M
17.86%
Dr.Web
Trojan.OutBrowse.370, Trojan.InstallCore.217
17.86%
McAfee
Program.Adware-OutBrowse.e, Trojan.Artemis!EC40F5C01761
17.86%
Norman
Dropped:Trojan.Generic.13285151, Kryptik.CDMO
17.86%
avast!
PUP-gen [PUP], Malware-gen
17.86%
Agnitum Outpost
PUA.OutBrowse, PUA.InstallCore
17.86%
Avira AntiVirus
PUA/Outbrowse.Gen, Adware/InstallCo.zlz
17.86%
AVG
Downloader, Adware InstallCore
17.86%
Bkav FE
W32.HfsAdware
14.29%
herdProtect (fuzzy)
a variant of d2205f7613bbd4ab7b71984c53fcdc5b8ec89172, a variant of ce268b668f9862321ec8060ee0cc095248b56c5e
7.14%
Comodo Security
Application.Win32.InstallCore.DWY, Application.Win32.InstallCore.DQE
7.14%
Emsisoft Anti-Malware
Dropped:Trojan.Generic.13285151
3.57%
The domain download.downloadstable.com has been seen to resolve to the following 4 IP addresses.
ec2-54-171-80-1.eu-west-1.compute.amazonaws.com
August 17, 2015
ec2-54-194-39-4.eu-west-1.compute.amazonaws.com
August 17, 2015
File downloads found at URLs served by download.downloadstable.com.
URL:
http://download.downloadstable.com/
Title:
“DownloadStable - DownloadStable”
Network:
Amazon Web Services (AWS), running an EC2 instance
SSL certificate subject:
CN=sni43646.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4)