home

foxit.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain foxit.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
2 joydownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

AVG
Generic, OpenCandy, Win32/Sality
100.00%

McAfee
Artemis!445FD8624A47, Artemis!4A21E1E9064A, Artemis!045AAB13437B, Artemis!91343DB4AB25, Artemis!44E7C9A999DF, Trojan.Artemis!4A21E1E9064A
85.71%

Malwarebytes
PUP.Optional.OpenCandy
85.71%

ESET NOD32
Win32/JoyDownloader
85.71%

Reason Heuristics
PUP.InnovativeSystems.S
85.71%

Avira AntiVirus
APPL/Downloader.Gen
71.43%

Trend Micro House Call
Suspicious_GEN.F47V0724, Suspici.218D75EB, Suspicious_GEN.F47V1115
57.14%

IKARUS anti.virus
PUA.JoyDownloader
57.14%

Dr.Web
Adware.Downware.6712, Adware.OpenCandy.47, Adware.OpenCandy.55
57.14%

VIPRE Antivirus
Opencandy, Sevas-S Installer
42.86%

Sophos
Generic PUA JL
42.86%

K7 AntiVirus
Adware
42.86%

G Data
Win32.Adware.OpenCandy
42.86%

Agnitum Outpost
Riskware.Agent
42.86%

Baidu Antivirus
Adware.Win32.OpenCandy
42.86%

The domain foxit.joydownload.com has been seen to resolve to the following 7 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
February 22, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
February 22, 2016

54.235.130.12
ec2-54-235-130-12.compute-1.amazonaws.com
July 1, 2015

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
December 16, 2014

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
December 16, 2014

184.73.244.120
ec2-184-73-244-120.compute-1.amazonaws.com
October 20, 2014

107.22.254.230
ec2-107-22-254-230.compute-1.amazonaws.com
October 20, 2014

File downloads found at URLs served by foxit.joydownload.com.

10 / 68    (Adware)
http://foxit.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsml0kPji1E1v4ZNbB47pquHf14WJwyNEcWxivMf eaiLolRZeMGKSG mEKtii xyz4WXBQaDu2vqBwX9uXGtiufa7dPbm3EN MEiiBZIUny1CDx0kcEh7CC5UGWTUukUiJ6jYiUMMbMzKxkPMar1U397c43EJBEw0 L2GWUvf4/glrRrWjb98UjE3/VtBJivJJvtLy0NloT/.../hqNnuxAU3PHfGqmFZ  (foxitreader621.0618.exe)

9 / 68      (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklU1NSrRR1CrJL6G5Ldjr2P8o3ZyzdoGMxKvPan3fHm ykYHcXGHWOOgEqdwmuc0m4HeFQfS9SnyHhCo5C/qyefa7dPbm3FJpJciiBZIVny1Tnpnn4Aj/yHoW3GSA7ZfwtW4bmMVY/.../JjQeg9O2XuMhlQ9DssCkyUrzLaBznT7zS48ErJKpSCDjspWRmysiZ79BRY9 M3wpoqH SQhq1xyx3J5OECbzRlSnsZGnzQ0vLHPEqmFZ  (foxitreader621.0618.exe)

9 / 68      (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv c8/zOn/j1gwJgEL0Ttes2jdyr4ogEJZjbOHeumBrUxwrF kY7IFQfS9S74BlSj4Tj/16SY65uEg2gIq5A6kQMdHC/jGDU2nsAj7HKjDnGSA7ZewtXjMyUMK7MwJQpLd738FXB ctzPNBBhhqLuAGV8LJf5iOc0BSqwtFDdyqAwUMf/YsntZXJWzcO4H/sv3BcW55q91AzqZel/.../OHohuPCsXhBnhATln50dUXnzDVT5op7lxQ0iPXfEumFZ  (foxitreader621.0618.exe)

9 / 68      (Adware)
http://foxit.joydownload.com/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynHxH6YNnTt h152b0sCgrn8kFbk3lYqn9P2G3g15cOHHaQrXyCr50ybtjztTrWETIu02tXRKi n29iuvRqNjQjzYD9Ic7wF9DVHy1Xmc21J94t264BnGSA7ZZwtW3aH9eLKs5bBIMOb20Dy5tc5fEJxBhhqPuAGJhao6x2 w/HGiouRnFn/V XcvpYsntZXNWzcC/D JnlR4f/.../hqNnuxAU3PHfGqmFZ  (foxitreader621.0618.exe)

9 / 68      (Adware)
http://foxit.joydownload.com/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Gh3wcteQv U8/zC24jEwnskFdE3mbLv1PHC7yVRdOSCGGOO1Xuxj0bIjzsCXFQ6T/ir6BFT8 3G8geeS943KmjpBoJ5ziVdIRjLjGDU2nsIj7CroUSCTQbxW2pO4dHdbOfB3bUQdOOz9U3BtLpGGf18wh LuESw3Idymw Z2BGuwoFvNjvQvDpC3Yp3tfXof1ca3D659wUlKqsvvhhvybaBn13XyEcQe5MWxUXjpoZrTkCgqdeAaGdEvMjwpsuGtD2w xk/.../yvZrixgc7azqRqmFZ  (foxitreader621.0618.exe)

10 / 68    (Adware)
http://foxit.joydownload.com/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpqK4fE9rm/4qHpwydoLL0/1Y/j2PXmunxdKOSCGHOO1X xpl Ynh9SWRAaV9T2uVRqiqnD8gffSpMuuzisS5fdl0gEXFnClCyB1ksIh4H6yD3GSA7ZdyM3zY25EKOVjZl1Nb738FXB6ctyYeVN7yLPvUSwjcpekjrFhWyuouRnFn/V Bpe/YsntZXJWzYLkSfsvxhcU5sv3jlLqN/.../Ma5UXKquZeaiHloJ 8BEJY2YHUitOOnHxliiBG33J5OECbzRlSnsZGnzQ0vLHPEqmFZ  (foxitreader621.0618.exe)

10 / 68    (Adware)
http://foxit.joydownload.com/get_file/wUiS4WnYccXBwj zXP7oQkEsml0kPjq1E1v4ZtbB47xquTC8sGMxwdgEP0Xiaqn3fHm6ykYNeiPVWby1E w9wr1hxMKeBASY SS7Bkf3smnr0raR8oiR1CEXs55ziVBIRiD4Qmcxhshq9C/wSDXAHOlOw4TrNTQNes9tZ0FLUfqmAi89fszPOBskjan6R25wao6x2 4/HCnj5kjE3/VuDoC8cNClLHte1dP5Wfsv3BcU55r8n1O7ZKl/hW//V91Wt826SDrjsJuC3HV0db0AT4I3K30hseelFQhqzRyy3c8bUD7qRQf0qYijnlFxYTWHqmFZ  (foxitreader621.0618.exe)

10 / 68    (Adware)
http://foxit.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6F6qtvqXf14WJxwclIdBP1Y/j2OXmuwlZZN2GECeLkErY90fo5kNSWXgaQ9GzyCkzl7iTj36CTvNKbm2BBs5c1gUdJF3ykACwszZc79WjwWGmLQb5Ow4TrNT0VN/.../hhvyaqBnwXX6Vt1Wrc25QHP7xc7Yw2hCMucXEMY7O349sOSmFQQ0xkOi3J5OECbzRlSnsZGnzQ0vLHPEqmFZ  (foxitreader621.0618.exe)

8 / 68      (Infected)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yOn9np5iNEIJ1Xlarr5PXuuyxdSNGmeTqHnQfdi0bI5zseZBg6U C37CkD8 3G8geeS943KmjpBoJ5ziVZIRjb Xix 18kr9Dn7WnGSA7ZYwtW3bmtSerJxJRoMOb2BCTImPKybd093zqfmEzglfoT6z7h9W3ux8VDOnPV UMv MJ7/JjQeg9O2XuMhlQ9DssCkyUrzLaB2nT7/.../hqNnuxAU3PHfGqmFZ  (foxitreader621.0618.exe)

16 / 68    (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv U8/zOh/jwnickFbk3kYqn OnGuyxdSNGmeTqHnQfdi0bI5zseZBgiS9i/.../4O h1vyfOkswz6tWsVc5YSxQnnjocXJ2Wx8Nv8GB9gvMjwptei1S0Up11Ki3J5OECbzRlSnsZGnzQ0vLHPEqmFZ  (foxitreader621.0618.exe)

20 / 68    (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsml0kPji1E1v4ZtbB4Kt2tCersGMrwdoKLE/lb7r1OHG3g15bOHHKQr21E/Y9xbNyxsScAg6Z7SS7Bkf3smnr0raR8oiR1CEXs55ziVBIRiD4Qmcxhshq9CjwSDrAFK5Xi83jPSUFbKs5bBIJOb2hCSYrLYzcLVgoj6v2ECMnao6x2 8/.../Lbh 1CaiCd0Lt5vuUXKquZOTkD5WOP4aAeZoaCt28uSlHARhiBe4yYgMRj7qRQfwqYinnls3NSvOuWFZ  (foxitreader621.0618.exe)

16 / 68    (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6F6qtvqXf14WJxwclXdBP1Y/j2PXmuwlBKOSCGGeO1R/YlyPpqw8yPQFXPq3C/T1T8 3G8geeX943KmiBBp58igVdDUXSvGDU2nsAj7GijDnGSGbZdw4TrNT0VLP0gJFsFMqXlV2h0O8TILAl3xOG9UHM3c9z40Ok0Cmu6t1PMlfQvDpG3YoL3O2NXnMu/F/slnw8eroL7h0quMfYhwm60CIxX7c2pQXzroZrTkCgqdeAaGdEvMjwpsuGtD2w xk/.../yvZrixgc7azqRqmFZ  (foxitreader621.0618.exe)

16 / 68    (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHRr6cteQv U8/zOh/jwnickFbk3kYqn OnGuyxdSMGmeRKq1E/Y9xLNyg5/DU1PWvD3zT0z0smnm0qHDpZrSk2lZo5EiiBZIVXatGGos14N1r2K/.../9Wzc3zYWhPMf0gJFsFN6XlACMjLdzFZREgj6v2ZHltIcGQhLxhWyu8sFvRnPltDIzoOJe8ZDJW3MuvXrBwjRZM54n2zlL7ZLg1zni0CIxX7M2pQnn7uNKanCYyMv4DHMZoK3R6uuOjHB5kiRO509tPUCbjDB 354jvhAUkNGDFqmFZ  (foxitreader621.0618.exe)

6 / 68      (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmHRr6cteQv A8/zyn9np5iNEMJ1XlbKn3fHm ykYHcXGHWOOgEqdwmuc0m4HeFQfS9S74BlSj4Tj/16SY65uEg2gIq5A6kQMdHC/jGDU2nsUj7H2lBjfMAq5Xi83iPSUFbbsgJFsFNaXlAzI/IYybNBB7hqDgEyQsfo3x0us TWO4uEiL2O1nR5i8etCvfXof1cK3D6p9yw8etIL8hhvybaBn13XyEcQe5MWxUXjpoZrTkCgqdeAaGdEvMjwpsuGtD2w xk/.../yvZrixgc7azqRqmFZ  (foxitreader621.0618.exe)

9 / 68      (Adware)
http://foxit.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//qSt4yNEcax6zerC/NXW20lZaM2aOE/usW78xyas2m5rJUk6D9GzyD0zlun69mf6SpN/SgzYD4cxy1kdJDXymDj90kcst9ynyUSCTRLZOnp69YiUMK7MwLBIdRfC/.../lSa0As9P5YSxQnnjocXJ2Wx8Nv8GB9gvMjwptei1S0Up11Ki3J5OECbzX1SnsZGnzQ0vLHDAqmFZ  (foxitreader621.0618.exe)

The following file have been seen to comunicate with foxit.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://foxit.joydownload.com/

Title:
“Foxit Reader - Download Foxit Reader 7 in english on JoyDownload”

Description:
“Foxit Reader is a lightweight PDF viewer that contains lots of advanced features you won’t find in other programmes of this kind - Download Foxit Reader latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  7
Shares:  89
Comments:  5

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.