home

installer.gameoff-prod.appspot.com

Google Inc.

Domain Information

This is a Google domain that provides services for a Google App Engine. Google App Engine is a Platform as a Service (PaaS) that lets developers build and run applications on Google’s infrastructure. The domain installer.gameoff-prod.appspot.com registered by Google Inc. was initially registered in March of 2005 through MARKMONITOR INC.. The hosted servers are located in Mountain View, California within the United States which resides on the Google Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
California, United States (US)

Create date:
Thursday, March 10, 2005

Expires date:
Tuesday, March 10, 2015

Updated date:
Thursday, February 6, 2014

ASN:
AS15169 GOOGLE - Google Inc.

Root domain:
appspot.com

Whois:
2 appspot.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SayMediaGroup.I, PUP.SayMediaGroup.N
100.00%

Dr.Web
Trojan.MulDrop5.10078
62.50%

VIPRE Antivirus
Threat.4788237
62.50%

McAfee
CryptInno
62.50%

Malwarebytes
PUP.Optional.InstallCore.A
62.50%

Avira AntiVirus
Adware/InstallCore.A.289
62.50%

Sophos
Install Core Click run software
62.50%

ESET NOD32
Win32/InstallCore.OK potentially unwanted application
62.50%

AVG
Generic
62.50%

herdProtect (fuzzy)
a variant of 17826e0ec4f439be103b527d9c2ee1d380d7e528
50.00%

K7 AntiVirus
Trojan , Adware
37.50%

Comodo Security
Application.Win32.InstallCore.GGTA
37.50%

F-Prot
W32/A-dbe1ec51
25.00%

The domain installer.gameoff-prod.appspot.com has been seen to resolve to the following 3 IP addresses.

74.125.22.141
qh-in-f141.1e100.net
July 31, 2014

64.233.171.141
July 23, 2014

74.125.29.141
qg-in-f141.1e100.net
May 30, 2014

File downloads found at URLs served by installer.gameoff-prod.appspot.com.

13 / 68    (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=wildtaxi&installertype=shortcut&cid=267110&clickid=05_32542944_92ca4c99-f63f-4c79-b96d-cea80e082a41&d2=5161302  (wildtaxi.exe)

13 / 68    (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=wildtaxi&installertype=shortcut&cid=267110&clickid=05_19831421_78c1a34c-5c95-4efe-9c00-f63503e440c9&d2=5048235  (wildtaxi.exe)

10 / 68    (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=ghostman&installertype=shortcut&cid=271275&clickid=05_75516991_3437648e-ec86-4c28-90c5-84da9e0e940e&d2=518041,5185748  (ghostman.exe)

10 / 68    (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=ghostman&installertype=shortcut&cid=271275&clickid=05_75498883_bbcb2ed7-d9c8-4dc2-8908-b3c0c84d3dff&d2=518041,5185748  (ghostman.exe)

1 / 68      (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=gemsswap&installertype=shortcut&cid=272180&clickid=07_91536167_a5cfd011-c7c6-47ce-a116-0124ab5feb8a&d2=5038715  (gemsswap.exe)

1 / 68      (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=mahjongg&installertype=shortcut&cid=272181&clickid=07_91678823_c2e9c700-8ef2-4135-afa7-1e95b52c3535&d2=5161302  (mahjongg.exe)

1 / 68      (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=bouncingballs&installertype=shortcut&cid=272179&clickid=07_100616731_6b2279b5-b3d8-4ac6-b90c-eef95203b4ff&d2=5161302  (bouncingballs.exe)

11 / 68    (Adware)
http://installer.gameoff-prod.appspot.com/download?gamename=ghostman&installertype=shortcut&cid=271275&clickid=05_14704564_a5b40e29-e023-490d-89df-b0e39652fec9&d2=518041,5185748  (ghostman.exe)

URL:
http://installer.gameoff-prod.appspot.com/

Title:
“download links”

Web server:
Google Frontend

chrome.com

golang.org

panoramio.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.