skype.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain skype.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Monday, February 6, 2017

Updated date:
Monday, November 9, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (63% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
83.33%

K7 AntiVirus
Trojan
83.33%

Trend Micro House Call
Suspicious_GEN.F47V0331, Suspicious_GEN.F47V0415, Suspicious_GEN.F47V0325
83.33%

Clam AntiVirus
Win.Trojan.Agent-855157
83.33%

Agnitum Outpost
Riskware.Agent
83.33%

Dr.Web
Adware.Downware.10304
83.33%

AhnLab V3 Security
PUP/Win32.OpenCandy
83.33%

G Data
Win32.Adware.OpenCandy
83.33%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
83.33%

McAfee
Artemis!82A9E120144D, Artemis!E1856FF7957B, Artemis!D11B03DAA44B
83.33%

AVG
OpenCandy
83.33%

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS, PUP.RICHMEDIASYSTEMS.Installer (M)
83.33%

VIPRE Antivirus
Sevas-S Installer, Trojan.Win32.Generic
66.67%

Sophos
OpenCandy, Generic PUA CE
66.67%

Panda Antivirus
PUP/OpenCandy
66.67%

The domain skype.1800download.com has been seen to resolve to the following 2 IP addresses.

ec2-52-10-34-223.us-west-2.compute.amazonaws.com
February 23, 2016

ec2-54-200-233-120.us-west-2.compute.amazonaws.com
February 23, 2016

File downloads found at URLs served by skype.1800download.com.

URL:
http://skype.1800download.com/

Title:
“Free Communications download for windows - 1800Download.com”

Description:
“Download free Communications from 1800Download.com. The website created to help you enjoy Eudora, IncrediMail. Safe and 100% virus-free.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  2
Shares:  3

Statistics are for the previous month.