download.vipboxsportapp.com

Whois Privacy Corp.

Domain Information

The domain download.vipboxsportapp.com registered by Whois Privacy Corp. was initially registered in December of 2012 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Server location:
Dublin City, Ireland (IE)

Create date:
Sunday, December 23, 2012

Expires date:
Friday, December 23, 2016

Updated date:
Thursday, December 24, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CoolMirage.P, PUP.Installer.CoolMirage.i, PUP.KantidaChanudrum.P, PUP.KantidaChanudrum.I, PUP.Installer.VASSANAKONGSOONGNERN.Y, PUP.CoolMirage.Installer (M), PUP.CoolMirage.VASSANAKONGSOONGNERN.Installer (M), PUP.OneClickDownloader.KantidaChanudrum.Installer (M), PUP.OneClickDownloader.InstallLab (M), PUP.OneClickDownloader.KantidaC.Installer (M), PUP.CoolMirage.VASSANAK.Installer (M)
100.00%

Sophos
CoolMirage, Install Core, Generic PUA HN, FT Downloader
64.71%

Dr.Web
Adware.Downware.1263, Adware.Downware.5516, Adware.Downware.8319, Adware.Downware.902, Adware.Yontoo.54
52.94%

VIPRE Antivirus
CoolMirage Ltd, Threat.4791953, Threat.4783938, Trojan.Win32.Generic, Iminent, News.net
52.94%

AVG
Generic
41.18%

ESET NOD32
Win32/AdWare.1ClickDownload.AW, Win32/Adware.1ClickDownload.AJ, Win32/Adware.1ClickDownload.AC, Win32/Adware.1ClickDownload.AY
38.24%

McAfee Web Gateway
Artemis!02B99126A3A3, Artemis!B35F72BBF8E0, Adware-SweetIM , Artemis!BC92986C48E8, Artemis!3B062ADE3FCC, BehavesLike.Win32.AdwareSweet.gc
35.29%

NANO AntiVirus
Riskware.Nsis.Downware.czyjkl, Trojan.Nsis.Yotoon.deckrr
35.29%

Kaspersky
not-a-virus:AdWare.NSIS.Yontoo, not-a-virus:Downloader.Win32.TornTV
29.41%

Avira AntiVirus
ADWARE/Adware.Gen, APPL/Downloader.Gen
29.41%

Panda Antivirus
PUP/MultiToolbar.A, Generic Suspicious, Trj/Chgt.J
26.47%

McAfee
Artemis!02B99126A3A3, Artemis!B35F72BBF8E0, Adware-SweetIM, Artemis!BC92986C48E8, Artemis!3B062ADE3FCC, Artemis!BC662FBD2D02, Artemis!9E4F95484016, Artemis!46934CE7CA4E
26.47%

Trend Micro House Call
TROJ_GEN.F47V0503, TROJ_GEN.F47V0416, Suspicious_GEN.F47V0621, Suspicious_GEN.F47V1121, TROJ_GEN.R00UC0OKH14, TROJ_GEN.F47V0428
26.47%

K7 Gateway Antivirus
Adware
26.47%

K7 AntiVirus
Adware
26.47%

The domain download.vipboxsportapp.com has been seen to resolve to the following 9 IP addresses.

ns1.ibspark.com
January 4, 2016

ec2-54-246-121-152.eu-west-1.compute.amazonaws.com
November 7, 2015

ec2-54-246-120-161.eu-west-1.compute.amazonaws.com
July 1, 2015

ec2-54-217-233-226.eu-west-1.compute.amazonaws.com
May 5, 2015

ec2-54-228-201-246.eu-west-1.compute.amazonaws.com
May 4, 2015

ec2-50-18-168-176.us-west-1.compute.amazonaws.com
December 30, 2014

ec2-184-169-157-32.us-west-1.compute.amazonaws.com
November 1, 2014

ec2-50-18-174-205.us-west-1.compute.amazonaws.com
May 7, 2014

ec2-184-169-175-49.us-west-1.compute.amazonaws.com
April 20, 2014

File downloads found at URLs served by download.vipboxsportapp.com.

11 / 68    (PUP)
http://download.vipboxsportapp.com/product_download.php?sp=a  (vipboxsportsappsinstall(18_3f)_ch.exe)

1 / 68      (Adware)
http://download.vipboxsportapp.com/loaderall.php  (vipboxsportsapp_setup_ch.exe)

1 / 68      (Adware)

1 / 68      (Adware)
http://download.vipboxsportapp.com/.../HDstream.exe  (00605ea8eb507da9ee794e4c58bc750a)

The following 142 files have been seen to comunicate with download.vipboxsportapp.com in live environments.

 
Latest 20 of 154 files

URL:
http://download.vipboxsportapp.com/

Google Analytics:
UA-48689684

Title:
“vipboxsportapp.com”

Web server:
nginx

30 of 618 related domains