The domain media.opencandy.com is registered by proxy through GODADDY.COM, LLC and was originally registered in January of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Tuesday, January 22, 2008
Expires date:
Sunday, January 22, 2017
Updated date:
Saturday, January 23, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Wooliktechnologiesltd.L, PUP.Optional.Installer.BeijingAmazGameAgeInternetTechnologyCo.Y, PUP.Installer.OpenCandy.f
100.00%
Dr.Web
Adware.Babylon.10, Adware.Downware.1414, Win32.Virut.56, Adware.Toolbar.246, Win32.HLLP.Neshta
88.89%
Malwarebytes
PUP.Optional.PCFixSpeed.A, PUP.Optional.OpenCandy, PUP.Optional.Linkey.A
77.78%
Agnitum Outpost
Trojan.Agent, Win32.Virut.Y.Gen, PUA.Toolbar.SearchSuite, Win32.Neshta.A
77.78%
Trend Micro House Call
TROJ_GEN.F47V1014, Suspicious_GEN.F47V0717, Suspicious_GEN.F47V0619, Suspicious_GEN.F47V0819, Suspicious_GEN.F47V0805, PE_NESHTA.A
77.78%
Comodo Security
Application.Win32.Babylon.aj, Virus.Win32.Virut.Ce, UnclassifiedMalware, Win32.Neshta.A
77.78%
Vba32 AntiVirus
suspected of Trojan.Downloader.gen, Virus.Virut.06, Virus.Win32.Neshta.a
77.78%
AhnLab V3 Security
Adware/Win32.Toolbar, Win32/Virut.F, PUP/Win32.SearchN, Win32/Neshta
77.78%
Bkav FE
W32.Clod96b.Trojan, W32.Vetor.PE, W32.NeshtaB.PE
77.78%
Baidu Antivirus
Adware.Win32.Bbylon, Adware.Win32.SearchSuite, Adware.Win64.SearchSuite, Virus.Win32.Neshta.$a
77.78%
NANO AntiVirus
Trojan.Win32.Babylon.csuksh, Virus.Win32.Runouce.bxafx, Trojan.Win32.Neshta.cwfstr
66.67%
F-Prot
W32/SearchSuite.A.gen, W32/HLLP.41472
66.67%
Kaspersky
not-a-virus:WebToolbar.Win64.SearchSuite, Virus.Win32.Neshta
66.67%
G Data
Win32.Application.AztecSystemK, Win32.Neshta
66.67%
IKARUS anti.virus
PUA.Toolbar.SearchSuite, Virus.Win32.Neshta
66.67%
The domain media.opencandy.com has been seen to resolve to the following 10 IP addresses.
s3-1-w.amazonaws.com
May 16, 2016
s3-1-w.amazonaws.com
April 15, 2016
s3-1-w.amazonaws.com
March 3, 2016
s3-1-w.amazonaws.com
February 22, 2016
s3-1-w.amazonaws.com
February 21, 2016
s3-1-w.amazonaws.com
February 9, 2016
s3-1-w.amazonaws.com
February 6, 2016
s3-1-w.amazonaws.com
February 3, 2016
s3-1-w.amazonaws.com
February 2, 2016
s3-1-w.amazonaws.com
July 10, 2014
File downloads found at URLs served by media.opencandy.com.
The following 48 files have been seen to comunicate with media.opencandy.com in live environments.
URL:
http://media.opencandy.com/
Network:
Amazon Web Services (AWS)