home

dropbox.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dropbox.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
2 joydownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems.Q, PUP.InnovativeSystems.Installer (M), PUP.Innovati.Installer (M)
100.00%

McAfee
Artemis!1FC34F821322, Artemis!7F961AD725AB
33.33%

Malwarebytes
PUP.Optional.OpenCandy
33.33%

Trend Micro House Call
Suspici.F184F561
33.33%

Dr.Web
Adware.Downware.1446
33.33%

VIPRE Antivirus
Opencandy, Trojan.Win32.Generic
33.33%

ESET NOD32
Win32/JoyDownloader
33.33%

AVG
Generic, OpenCandy
33.33%

K7 AntiVirus
Unwanted-Program
16.67%

NANO AntiVirus
Riskware.Win32.OpenCandy.ddmsby
16.67%

avast!
Win32:Adware-gen [Adw]
16.67%

Agnitum Outpost
Riskware.OpenCandy
16.67%

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
16.67%

Sophos
OpenCandy
16.67%

Comodo Security
Application.Win32.OpenCandy.~WD
16.67%

The domain dropbox.joydownload.com has been seen to resolve to the following 4 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
February 1, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
February 1, 2016

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
May 6, 2015

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
May 6, 2015

File downloads found at URLs served by dropbox.joydownload.com.

8 / 68      (Adware)
http://dropbox.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsm10kPjCnChOxat7Zp6dy/269qGl42docJgTtarHuYDCuyxdSNWmeXLD5TOpwgKtrh8ybDR7HoHOsWQTlszi1if/.../hsIs7CC5UGKZSq4IkYSha2ZOLftuPRNMOaj9RC49J46ceVMwh LuESw3Ptymw Z2BG woFjNnftlAIC2M8iqZWMKhp3oD JnlR8V55qJzwe4PPU97nLlR54BspL5XSyh5oOb2SYmbaQWDcRkeyoxu7utHB5hhha50t1AFieiDA75sdm9kx0uZ3jFsyc=  (dropboxinstaller.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymHxr6ZN3VtOh152b0sCsrn8kFdE3mY/j2PXmunxdKOSCGHOO1X xpl Ynh9SWRAaQ/yXqWB 0 CfuwrCT8svT0mlMq4dkwQoCBinvGDU2nsEj7G SGjaSr1W2sbzPHQNbrMgeUdTZ/q1RHE8cszENBojnqqnGCUvatyrhf8 TWO4uEjNmO1nR5i etDoNiVO1IK3G M2nR8X6Ir9n1O7ZKl/hWz/V91Wrc24SWvou5GCkW8qY7xRE91hbG0o8 ilGBBz2lTvl48bW3W/.../8axhQ0kPnfGpj9ciMvYfQ==  (dropboxinstaller21052.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklU2NSrTWkeyMoObzL11qTSi/j0w1Y5GeFXsK7H/NWH8mQBKOSCGGOO1Gb030bIjzsWXFUrIqz3zT0zxsmm9ifTVp93KmiBBp58i1h0CDTTyGDUsnsIt/.../HG67oFGMlvxmFtHkJNClNntd1IK3H M2wF4H5sv3ilLqKfMrw3PhQN1Wrc25SWut94Ob2SYhbaRCV49 M34juvDzRFkh0kf5kp8YASeiDAr5sc6mmE93YTrWsyc=  (dropboxinstaller.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPTy1E1v4ZtbB4Kt2tCersGMrwdoKLEHjabn9N3e3g15ZMmmeT7DkWOlmivwimNSWRAaW9T2sThm36iT3mf6SpNvSgycPs55ziVRIRne1AX1/l8k7vXKuSGjASr1Xi83nPSVRN VmelodOOz9VHBtec/cLVgoiKv2RH95LZf5kuc3C2Oo5hiQ3K0zTMvjM4b/.../rBQfh48Ow1QRmNHHOqmsc3cvYfQ==  (dropboxinstaller21052.exe)

18 / 68    (Adware)
http://dropbox.joydownload.com/get_file/wUiS4WnYccXBwj zXP7oQkEsml0kPj21E1v4Y9bB87pi/269qG542dkMLEPubKn3fHm/ykYbazeeELCtGb50yb9q1pPVR1XTqj3zVUz2vHq/j/bXqtzQmiBBop8iwwwWRn3kAD1/hsIh/jnxGWmbSq4Di9XqdD0AYqt1dkZbbOi0RHE8csjENE190PWxUDQuO4/.../8yD3ux8VDLlu06Xc7oYsntZXNc1dPJX7ZkzUJdlNa yQmkMv83iXnuVt1Wrc25SWut94Ob2SYhbaRCV49 M34juvDzRFkh0kf5kp8YASeiDAr5sc6mmE93YTrWsyc=  (dropboxinstaller.exe)

18 / 68    (Adware)
http://dropbox.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL1as6H97x2vzq2sGMxwdgEPwS PKn3Znm9yxdSNGmeTqHnQfdi0bI5zseZBgyT/.../HeM2619KrdqixSGmLe4ky3DzQdEIppKpSDrjtZuCzHN8M MBV49 M30pouWmDxEihBS6xYIHASeiDAr5sd29mVt6eTHWsyc=  (dropboxinstaller.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqlGBnxcteQv U8/zC24jEwnskFdE3mbLr/N3q9wF1bOSCGH O1Tuxrlqtrh8yfBAaDq22nTBSo8CLhyLGA8oWN02FKoYtlywBQXzWtCTRn1Jp97CC5UGCTUr1UyNXqdD0GaLMge0FMc/OmHz89JNzFZRElhrOwUHllKtq6w Z2BG woAyQwKs5RoC2M8itZWNd3cSvFqounBcHtNGpn1O7ZKh/.../44JDnzR1mZybWszMe3NKe  (dropboxinstaller210.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVx1NT6tCk26IIWR4PE9tG//pml0wtsKKkHmY/.../BlSw4SXr1LKSvNKbm2BBs9Vp10dJF3ykACx0nMM79WjwW2OTUugFi4e9Zn5CKuUgJFsFNKXlAjggOJyRbgkpz6viGDRzJ9mmhK8nBSqwsFDdnf5 D9G3dMi8OSgAitO2XuMmmhcHucqizQqnJvMr1Gj3X5MIrMW6Q3zrrcTYzz4rJLxAT5ZkYCsxu6GtHxBzjBKi3J5OECbzQFSnsZGnzQkvLHDGum8W3cvYfQ==  (dropboxinstaller21052.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklU1NSrzWkeyMoOb7L11qTSi/j0wydoOMxKvPan3fHm/ykYBazeeEKqtGr8lwb1yz4WXBAaDuXasHk20sn21mffTrNnZknFA4p8xg19QAC/kSmIk3YZrojnxGWmeSq4IipihZWhPerJxJRsFIe uAmh0O8TNLAkjhKH2GWUvfo/gh7JpWjz4oFGMlvxmFpO/ddClLHte1dPiXvsv3BcS55q61AasMe02hSflCclX/.../44JDnzR1mZybWszMe3NKe  (dropboxinstaller210.exe)

1 / 68      (Adware)
http://dropbox.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1Hxnga5/ZtukkrjyqsGMrwdoFbk3lYqm4e2G3g15ZOHGNCeLkErc90eYj1s3eDQub7WihUhKo/zitgLbbrdPK1zofs55ziVNIRnSlCzp8kNEivSH7WmmLFOUfiJuwfnJFNKs5bBIIOb2jFCU/KpGGNBBhhqfuAHNtONywhP8 V2O7tlvOlPZsBpe e4GkbHtOhpjpD JnlR8f/4r5n1O7ZK5/hXr/X5pP5YSxQXnjoeXSxWxyOP46G8d5aCN/.../44JDnzR0kNnLWsyc=  (dropboxinstaller.exe)

8 / 68      (Adware)
http://dropbox.joydownload.com/get_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTmnEgqmOZ T6bJ/qCeisGMxwdwEPxOlN/uuYDuuyxdSMWmeXbDzCr50yb9q1sSfBgiY z3zT0z1smngyOfa7dPfm3EM Mtk3BIBRn3kADh/.../44JDnzR0kNnLWsyc=  (dropboxinstaller.exe)

The following file have been seen to comunicate with dropbox.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://dropbox.joydownload.com/

Title:
“Dropbox - Download Dropbox 3.03 in english on JoyDownload”

Description:
“Dropbox is an awesome program for storing as well as sharing your documents and media files - Download Dropbox latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  1
Shares:  19
Comments:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.