get2.downvision.com
China Capital Investment Limited
Domain Information
The domain get2.downvision.com registered by China Capital Investment Limited was initially registered in April of 2015 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Redwood City, California within the United States which resides on the Incapsula Inc network.
Registrant:
China Capital Investment Limited
Registrar:
EUNAMESOREGON.COM LLC
Server location:
California, United States (US)
Create date:
Thursday, April 9, 2015
Expires date:
Sunday, April 9, 2017
Updated date:
Sunday, April 10, 2016
ASN:
AS19551 INCAPSULA - Incapsula Inc, US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
avast!
Adware-gen [Adw], Win32:PUP-gen [PUP], Win32:Adware-gen [Adw]
57.14%
F-Prot
W32/Trojan2.NQMI
57.14%
Reason Heuristics
Threat.Win.Reputation.IMP, Adware.Generic.AT (M)
57.14%
Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.122674, Gen:Variant.Zusy.133952
42.86%
AVG
Potentially harmful program Downloader.AJG, Win32/Heur
42.86%
ESET NOD32
Win32/DownVision.AA potentially unwanted application
28.57%
Dr.Web
Threat.Undefined, Detection.Undefined
28.57%
VIPRE Antivirus
Threat.4657539, Threat.4150696
28.57%
Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.122674
14.29%
Avira AntiVirus
TR/Offend.KD.569515
14.29%
Bkav FE
W32.Clod1b1.Trojan
14.29%
MicroWorld eScan
Gen:Variant.Adware.Graftor.122674
14.29%
Malwarebytes
Trojan.Agent
14.29%
SUPERAntiSpyware
Trojan.Agent/Gen-DownVision
14.29%
K7 AntiVirus
Riskware
14.29%
The domain get2.downvision.com has been seen to resolve to the following 3 IP addresses.
192.230.92.93.ip.incapdns.net
August 7, 2016
File downloads found at URLs served by get2.downvision.com.
The following 4 files have been seen to comunicate with get2.downvision.com in live environments.
URL:
http://get2.downvision.com/