WHOISGUARD, INC. (Proxy Registrant)
The domain download.fontfiles.net is registered by proxy through ENOM, INC. and was originally registered in April of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Virginia, United States (US)
Thursday, April 25, 2013
Monday, April 25, 2016
Thursday, March 26, 2015
AS14618 AMAZON-AES - Amazon.com, Inc.
Detections (100% detected)
PUP.Optional.DirectionSoftware.O, PUP.MaxSetup.O, PUP.CreativeInternet.Reputation, PUP.DirectionSoftware.O, PUP.installCore.DirectionSoftware (M)
Install Core Click run software, PUA 'Install Core'
PUP.Optional.InstallCore, PUP.Optional.Direction, PUP.Optional.InstallCore.A
InstallCore.b, Threat.4788237, Threat.5063361, Threat.4150696
ADWARE/InstallCore.Gen7, TR/Trash.Gen, PUA/InstallCore.Gen7
MalSign.InstallC, Trojan horse Ransomer.DBB, Adware BundleApp.LXU
Win32/InstallCore.BY potentially unwanted application, Win32/InstallCore.JE.gen potentially unwanted application, Win32/InstallCore.DJ potentially unwanted application
K7 Gateway Antivirus
McAfee Web Gateway
The domain download.fontfiles.net has been seen to resolve to the following 4 IP addresses.
October 9, 2014
July 23, 2014
April 14, 2014
January 1, 2014
File downloads found at URLs served by download.fontfiles.net.