The domain downloadandusenow.com registered by Whois Privacy Shield Services was initially registered in December of 2014 through INTERNETWORX LTD. & CO. KG. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrant:
Whois Privacy Shield Services
Registrar:
NAPOLEON BONAPARTE, LLC
Server location:
Arizona, United States (US)
Create date:
Monday, December 8, 2014
Expires date:
Tuesday, December 8, 2015
Updated date:
Tuesday, December 9, 2014
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.PSKLOGEUM.c, PUP.PSKLOGEUM.h, PUP.PSKLOGEUM.Z, PUP.PSKLOGEUM.?, PUP.PSKLOGEUM.s, Threat.PSKLOGEUM, PUP.SmartInstaller.PSKLOGEUM (M), PUP.SmartInstaller.PSKLOGEU (M), PUP.SmartInstaller (M)
100.00%
Dr.Web
Trojan.DownLoader11.19511
46.15%
avast!
Malware-gen, PUP-gen [PUP]
46.15%
McAfee
Artemis!FEDEA1F9F2B9, Artemis!ACA1420A2A89
46.15%
Kaspersky
Trojan.Win32.Agent, not-a-virus:AdWare.Win32.SmartInstaller
46.15%
Bitdefender
Trojan.GenericKD.1800295, Gen:Variant.Application.Barys.35597
46.15%
Emsisoft Anti-Malware
Trojan.GenericKD.1800295, Gen:Variant.Application.Barys.35597
46.15%
VIPRE Antivirus
Ividi, Threat.4150696
46.15%
G Data
Trojan.GenericKD.1800295, Gen:Variant.Application.Barys.35597
46.15%
AVG
Generic, Win.Threat.Medium
46.15%
herdProtect (fuzzy)
a variant of 49c2298b6b5552dd7bcb112e5f59974ff435798c, a variant of b3daf5d7742930eae8f4aa420fd602a01af2dda1, a variant of 7174026a90900c11024eec2c453ba8519c1700bf
46.15%
Qihoo 360 Security
Malware.QVM06.Gen
38.46%
Trend Micro House Call
Suspicious_GEN.F47V0808
38.46%
Avira AntiVirus
TR/Dropper.Gen
38.46%
ViRobot
Trojan.Win32.A.Agent.1283072
38.46%
The domain downloadandusenow.com has been seen to resolve to the following 3 IP addresses.
File downloads found at URLs served by downloadandusenow.com.
The following 3 files have been seen to comunicate with downloadandusenow.com in live environments.
URL:
http://downloadandusenow.com/
Google Analytics:
UA-48689684
Title:
“downloadandusenow.com”
Related Domains
30 of 618 related domains