download.downtoad.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download.downtoad.com is registered by proxy through GODADDY.COM, LLC and was originally registered in April of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Monday, April 22, 2013

Expires date:
Friday, April 22, 2016

Updated date:
Thursday, April 23, 2015

ASN:
AS393406 DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.DownloadAssistant.Bundler (M), PUP.Vittalia.InstallAssistant.Installer (M), PUP.DownloadAssistant.Bundler.Installer.Meta (M), PUP.Vittalia.InstallA.Installer (M), PUP.Air Software.Download.Bundler (M), PUP.Vittalia.InstallA (M), PUP.Air Software (M), PUP.Vittalia (M)
100.00%

Dr.Web
Trojan.Vittalia.30
14.00%

F-Secure
Riskware.Gen:Variant.Application.Bundler, Gen:Variant.Adware.Jatif
14.00%

ESET NOD32
Win32/DownloadAssistant.A potentially unwanted application
14.00%

Bkav FE
W32.HfsAdware
14.00%

NANO AntiVirus
Trojan.Win32.Vittalia.dqfrig, Trojan.Win32.DownloadHelper.dpgylc
14.00%

Comodo Security
Application.Win32.DownloadAssistant.S
14.00%

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
14.00%

AVG
Generic, DownloadAssistant.A
14.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.AirInstaller.5
12.00%

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.AirInstaller
12.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.AirInstaller.5
12.00%

Bitdefender
Gen:Variant.Application.Bundler.AirInstaller.5
12.00%

AhnLab V3 Security
PUP/Win32.DownloadAdmin, PUP/Win32.Bundler
12.00%

G Data
Gen:Variant.Application.Bundler.AirInstaller
12.00%

The domain download.downtoad.com has been seen to resolve to the following 4 IP addresses.

lb-182-241.above.com
July 15, 2016

ip-50-63-202-58.ip.secureserver.net
May 17, 2016

fd-03-do-e-ny-3.gtdlrfwd.com
November 18, 2015

useast.gtdlrfwd.com
March 25, 2015

File downloads found at URLs served by download.downtoad.com.

 
Latest 30 of 59 download URLs

The following 103 files have been seen to comunicate with download.downtoad.com in live environments.

 
Latest 20 of 104 files

URL:
http://download.downtoad.com/

Title:
“Welcome to nginx!”

Web server:
nginx/1.4.6 (Ubuntu)