Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)
The domain download.gilisoft.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in May of 2009. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Brea, California within the United States which resides on the New Dream Network, LLC network.
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
California, United States (US)
Tuesday, May 12, 2009
Thursday, May 12, 2016
Monday, May 11, 2015
AS26347 DREAMHOST-AS - New Dream Network, LLC,US
Detections (91% detected)
PUP.Installer.HengyidaInformationTechnologyCOLTD, PUP.HengyidaInformationTechnologyCOLTD, PUP.HengyidaInformationTechnologyCOLTD.Installer (M), PUP.Hengyida.Installer (M), PUP (M)
Win32/Somoto, Win32/Downloader.Delf.A potentially unwanted (variant), Win32/Somoto.E potentially unwanted
Adware/Downware.BH, TR/Dldr.Agent.836192, TR/Agent.4456496
Win32:Adware-gen [Adw], Win32:Malware-gen
McAfee Web Gateway
The domain download.gilisoft.com has been seen to resolve to the following 2 IP addresses.
May 3, 2015
January 10, 2014
File downloads found at URLs served by download.gilisoft.com.
The following 5 files have been seen to comunicate with download.gilisoft.com in live environments.