flashplayer.pl.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain flashplayer.pl.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Monday, February 6, 2017

Updated date:
Monday, November 9, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Trojan
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0413
100.00%

Clam AntiVirus
Win.Trojan.Agent-855157
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Dr.Web
Adware.Downware.10304
100.00%

VIPRE Antivirus
Sevas-S Installer
100.00%

Sophos
OpenCandy
100.00%

G Data
Win32.Adware.OpenCandy
100.00%

AhnLab V3 Security
PUP/Win32.Agent
100.00%

McAfee
Artemis!183A492BF350
100.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
100.00%

Fortinet FortiGate
Riskware/OpenCandy
100.00%

AVG
OpenCandy
100.00%

Panda Antivirus
PUP/OpenCandy
100.00%

The domain flashplayer.pl.1800download.com has been seen to resolve to the following 2 IP addresses.

ec2-54-200-233-120.us-west-2.compute.amazonaws.com
July 23, 2016

ec2-52-10-34-223.us-west-2.compute.amazonaws.com
July 23, 2016

File downloads found at URLs served by flashplayer.pl.1800download.com.

URL:
http://flashplayer.pl.1800download.com/

Title:
“Darmowe Internet pobieranie dla windows - 1800Download.com”

Description:
“Pobierz za darmo Internet z 1800Download.com. Serwis stworzony, aby pomóc Ci cieszyć się 4shared Desktop, Java Runtime Environment. 100% bezpieczne i wolne od wirusów.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Shares:  3

Statistics are for the previous month.