The domain imgburn.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Monday, March 18, 2013
Expires date:
Saturday, March 18, 2017
Updated date:
Thursday, January 28, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
ESET NOD32
Win32/OpenCandy, Win32/JoyDownloader, Win32/OpenCandy.C potentially unsafe (variant)
85.71%
Malwarebytes
PUP.Optional.OpenCandy
85.71%
Reason Heuristics
PUP.InnovativeSystems.M, PUP.InnovativeSystems.H, PUP.OpenCandy.Installer (L), PUP.RICHMEDIASYSTEMS.Installer (M)
85.71%
Agnitum Outpost
Adware.OpenCandy, Riskware.Agent
71.43%
Dr.Web
Adware.OpenCandy.3, Adware.OpenCandy.55, Adware.Downware.5295, Adware.Downware.9759
71.43%
McAfee
Adware-Opencandy, Artemis!F228E9DBA34E, Artemis!BA4E6AF3E003, Artemis!931E2E9D4DB4, Artemis!4ABAA5947919
71.43%
AVG
Generic, OpenCandy
71.43%
Trend Micro House Call
ADW_OPENCANDY, Suspicious_GEN.F47V0716, Suspici.792C221A
42.86%
Clam AntiVirus
Win.Trojan.Agent-803351, Win.Trojan.Agent-855157
42.86%
Avira AntiVirus
APPL/Downloader.Gen
42.86%
AhnLab V3 Security
PUP/Win32.OpenCandy
42.86%
Baidu Antivirus
Adware.Win32.OpenCandy
42.86%
avast!
Win32:Malware-gen, Win32:PUP-gen [PUP]
28.57%
Sophos
Generic PUA EM, Generic PUA CJ (PUA)
28.57%
VIPRE Antivirus
Opencandy, Trojan.Win32.Generic
28.57%
The domain imgburn.joydownload.com has been seen to resolve to the following 9 IP addresses.
ec2-54-225-168-223.compute-1.amazonaws.com
March 31, 2016
ec2-50-19-96-56.compute-1.amazonaws.com
March 31, 2016
ec2-54-235-130-12.compute-1.amazonaws.com
August 19, 2015
ec2-23-23-159-111.compute-1.amazonaws.com
December 1, 2014
ec2-23-21-241-197.compute-1.amazonaws.com
December 1, 2014
ec2-107-22-254-230.compute-1.amazonaws.com
October 9, 2014
ec2-184-73-244-120.compute-1.amazonaws.com
October 9, 2014
ec2-23-23-108-120.compute-1.amazonaws.com
September 5, 2014
ec2-107-22-195-231.compute-1.amazonaws.com
September 5, 2014
File downloads found at URLs served by imgburn.joydownload.com.
The following file have been seen to comunicate with imgburn.joydownload.com in live environments.
URL:
http://imgburn.joydownload.com/
Title:
“ImgBurn - Download ImgBurn 2.5.8 in english on JoyDownload”
Description:
“ImgBurn –outstanding toolkit for burning disk images with ease and simplicity - Download ImgBurn latest version here.”
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)
Statistics are for the previous month.