home

opera.1800download.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
1800download.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Trojan
100.00%

Trend Micro House Call
Suspici.F4CBE3E4, Suspicious_GEN.F47V0415
100.00%

VIPRE Antivirus
Sevas-S Installer
100.00%

G Data
Win32.Adware.OpenCandy
100.00%

McAfee
Artemis!C40FC4A0A9DA, Artemis!8374D39AF1F6
100.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
100.00%

AVG
OpenCandy
100.00%

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS
100.00%

NANO AntiVirus
Riskware.Win32.Downloader.dqybkl
50.00%

Clam AntiVirus
Win.Trojan.Agent-855157
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Sophos
OpenCandy
50.00%

Dr.Web
Adware.Downware.10304
50.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
50.00%

The domain opera.1800download.com has been seen to resolve to the following 2 IP addresses.

52.10.34.223
ec2-52-10-34-223.us-west-2.compute.amazonaws.com
May 20, 2016

54.200.233.120
ec2-54-200-233-120.us-west-2.compute.amazonaws.com
May 20, 2016

File downloads found at URLs served by opera.1800download.com.

9 / 68      (PUP)
http://opera.1800download.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPTyjChOxatrZp7VpsTGr4Hp5iNEMJ1XlYan3fHm/ykYeazeeEKqtHr8lwbtlx8OVFQfS9SvyHhCu5C6tgLbbr9jSgzwL9NdhgVJcAT7yGDU2nsIp9DmuAyDZHO0VjYW9JTxEYrw4PUdPZu2mRHE8cs3ENFh72LPvSywkcI6x2 4/HDDj5kjE3/VuDoC c9ClLHte1dPiXvsv3BcS55q61AasMe02hSflCclX/JLzAyCr5oObwyYhY7RETIQ/.../47g==  (opera27.exe)

18 / 68    (PUP)
http://opera.1800download.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1GhHga5/ZtukkqzyqsGMxwd0EP0Xlbbj5N2G3g15cOHHaQrXyCr50ybhhztTCR1nTri3/EhO/7Wm0yP/SpMuByDdZqtY6gV9QV3W1AX1/lcMj7H jGSPFEfUZipvzPHQNbbMgcFhacf7lXTl1fsTcc1Ni1eOxAC18coT20 Q1DWmzu17E3/VuDoD5NNClLHtd1dO8D JnlR4f/.../CsXhBihATzjolWGHXrBwX47g==  (opera27.exe)

9 / 68      (PUP)
http://opera.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4Y9bB9bpi/269qGt42dkKKVXsK7H6NWHpiBQBcDaeELCtGbE1xbFmxs6aBgfS9SzyHgWu7Gm00v/QptKbm2dBs8Np3wBQXzWtCz9/hpxpq2mrWGSHFfQJ2syiPTENeu9tc0xacb38FXB9ctzMLwkpz6vmGDRhPJf5kuc0BHu7oFGMlv5sDoDpKYHuMyAVmoPhD JnlRgf/9e92BqpfKE2nS6sEZAe/Mz4SX7jodbJxHh/IPVRTsc3OnUx9rvzDxEihBC6xd9GFi/.../47g==  (opera27.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.