home

openoffice.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain openoffice.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Monday, February 6, 2017

Updated date:
Monday, November 9, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
1800download.com

Whois:
1 1800download.com record

Scanner detections:
Detections  (60% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS, PUP.RICHMEDIASYSTEMS.Installer (M), PUP.RICHMEDI.Installer (M)
100.00%

McAfee
Artemis!7CCD61D90EA4
66.67%

Malwarebytes
PUP.Optional.OpenCandy
66.67%

K7 AntiVirus
Trojan
66.67%

Trend Micro House Call
Suspicious_GEN.F47V0313
66.67%

avast!
Win32:Malware-gen
66.67%

Clam AntiVirus
Win.Trojan.Agent-855157
66.67%

VIPRE Antivirus
Trojan.Win32.Generic
66.67%

G Data
Win32.Adware.OpenCandy
66.67%

AVG
OpenCandy
66.67%

Dr.Web
Adware.Downware.10304
33.33%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
33.33%

The domain openoffice.1800download.com has been seen to resolve to the following 2 IP addresses.

54.200.233.120
ec2-54-200-233-120.us-west-2.compute.amazonaws.com
February 28, 2016

52.10.34.223
ec2-52-10-34-223.us-west-2.compute.amazonaws.com
February 28, 2016

File downloads found at URLs served by openoffice.1800download.com.

0 / 68
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv U8/zOh/jwnickFbk3kYqn9PnuuyxdSMWmeQrDzCr50ybtq1sWeFQfS9SzyHgWu7Gm00v/QptKbm2JLq4dk2hYCCCfuT3wphshq9Cr6UHHGAOkCl5G3bmRSerJxJRoFIeuzRHE8cs/.../aH5dEJmoxQlMHnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

1 / 68      (PUP)
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsml0kOj61E1v4YtbB8ack5ib0o2JgyskFbk3lYqmjfGG3g15fOHHLQrfzR/J00bIjzsWXFVXIqz3zT0z1smm8iOfa7dPZkWlZ9cxzwwkTHTPlVix 18ko/iHoBSPMHuMKnp6yYiUMK7M0JQpZbPOjAzhtc43EJREwjaDsAC1mcob4w65sWnux61DOlPQvDpG3YoT3O2NXnMu7F/smnRwc5Y/vhhvyaKBnwmTmWo0I/.../NqxmVBzaCuX7QUQw9jNMR3vHB ywPJ5BluulmWGWFZaPCRCUtK3l0EbCnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

1 / 68      (PUP)
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKlEgq2JM7Y9uk353f/sGMxwdgEPx6 PKn3fHm ykZbMXGHWOOjEqdhmuU11s3eDQiY9T2pTBek4C7Q1LWE8IaOxzoY9Po0nVRcVRngU2Aa3MsvkXKkGSfIHOAznZn8cnQZPfFnPRNMOan9RC83OJeMcwkp1avlFiQteoD00 kxBSqwtFDdyqAwUMf/YsntZXJWzcC8Ffsv3BcU7YLv2QG7LvYk3mnkX91Wrc26Q3P77NHFxHN2Me8QEJY2enUguvDhRE5zhVW60ddWES7gDwX0sZGnzQwvLDKd7HgfntPROmCtQ1PWy/.../9nU4NCnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

21 / 68    (PUP)
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxLzYNbB6qNjszqo9DEhnskFbk3hYqmpdzPlggFKOTqGGu2lELUywbFhxc3eDQ b7WyhWFT84XG g/6SpNvSgycPs55ziVRIRne1AX1/l8k7vnKuSGjaSr5W2sLnJTxEYr04PU5Wb/rlXTl1fMfENEpi3fK8R0l6ONCsjrtjVzrv3V7RneFta9XkLq3mZ3czhp/.../B5YxCmin2DUUgnYjlVFJu7wwhGCnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

0 / 68
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKhEgqnKJyK97Yk5jz0o2xww9MOL0fkbLC/NXG20hAcIGjPEeitCrQlyPpqx8yPR1XF7SS7BkT9qn65mf6SpN/SgzUU/cFlwUdJF3ykACx0lcs79WjwWGmLH/9Ow4TrMD0VL Bse0dIcL38FXB eMTcckJhzP21W2NnJJf5kuc0DmOo7RqawqA6UsvuJdClLHtf1dPkRL02lF4f74LvjlvqZel/kya0VZYBu9WwAHPtupuCy2xxNO4WKtt9bCF85rT Tk8OigixydwrVHW/aUX7pfW9mUxhby6Y1z9KwJyQLifgEFPWy/.../b3BNFZOoywFJCnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

21 / 68    (PUP)
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yOn9np5iNEIJ1Xlarr1N3SuyxdSM2OGCb3 W/VrkvAlhpqPDE b/i/yHhm37SXg3aOI/YzKmiBBo58ixxFQXzWtCzRnldEivSH8UHHPH AInYXzPHQNa7MgLhkHIaS0XHl1ao6Xcgkpz6vmGDQgfpf5kuczBHvv hqW3qp D8u3ccasZ3Zd2Mm4G JnlR4f/9Gk2UrzLaB3nT6lAN1Wrc2/SWu/6s3FiCdjbbJKT5ZseS5w6LfIQlo00EnmgYQXRkPlGAztovWjnlFKdnrC1zNKnp2CbC7HEB/.../ezkGQ4OimwNPEHvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

21 / 68    (PUP)
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXEwj /.../MyynlxwLHmHsmkez4CKZGCjBkvfguh8ahD7livVDhhxLWhUVJuoyBtPCnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

1 / 68      (PUP)
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKkEgqrOYjBvqA872/soWtgwJgEL031N/juNDC2x15KdTrST7bgW6c8gLNjztTdXliD9GzyDkzlvX2tgLbbqNPKxzwX9cBykV4BXnWtGD90nNEivSH8UHHMCPwFipLzPG4Nab0wJxEGOqr3UnE8csrENE170PT2GWUvfIz4w7x1Xzri5zWQ3KoyW8TrKZH7AHVC3t 8cq59wXJd5Y6S1Aa7Kvspy0PzXdIYrdnuCyz7uNKamCYyI/JRTsc3OHUxsfCsXhBihAT2jolWGG/.../m1obCnvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

0 / 68
http://openoffice.1800download.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqmERD1cteQv E8/zq9sGMxwdwEPwC Nu jeDCuyxdSNGmeTbb7TOB10bIjzsWXFQ2Q9z3zT0zxsmnqw7WI7IzKmjpBoJEyi1FEUHahDDU2nsEj7G SGjaSr1W2sbzPHQNbLMgeUFTZr38FXB7ccTcd1tz3/.../ezkGQ4OimwNPEHvY  (apache_openoffice_4.1.1_win_x86_install_en-us.exe)

URL:
http://openoffice.1800download.com/

Title:
“OpenOffice - Download OpenOffice 4.1 in english on 1800Download.com”

Description:
“OpenOffice is an excellent office software suite, which provides tons of features and serves as an excellent alternative to Microsoft Office Suite because all its features are absolutely free of charge - Download OpenOffice latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  1
Shares:  7
Comments:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.