home

skype.il.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain skype.il.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Friday, March 18, 2016

Updated date:
Friday, May 1, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
1 joydownload.com record

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.InnovativeSystems.K, PUP.InnovativeSystems.Installer (M)
100.00%

McAfee
Artemis!3224CA6DB9ED, Artemis!6C04318E1E19, Artemis!713280E41BEA, Artemis!FFB6A44B385E, Artemis!53E8DA892A7F, Artemis!A8A7204CE88D
87.50%

Trend Micro House Call
Suspicious_GEN.F47V0722, TROJ_GEN.F47V0604, Suspici.792C221A, Suspicious_GEN.F47V1112, TROJ_GEN.R0C1C0OLC14
87.50%

Sophos
Generic PUA CP, OpenCandy, Install Core Click run software
87.50%

VIPRE Antivirus
Opencandy, Trojan.Win32.Generic
87.50%

Avira AntiVirus
APPL/Downloader.Gen, ADWARE/InstallCore.Gen
87.50%

Baidu Antivirus
Adware.Win32.OpenCandy, Adware.Win32.InstallCore
87.50%

AVG
Generic, OpenCandy
87.50%

K7 AntiVirus
Unwanted-Program , Trojan
87.50%

Comodo Security
Application.Win32.OpenCandy.~WD, ApplicUnwnt
87.50%

Malwarebytes
PUP.Optional.OpenCandy
75.00%

Agnitum Outpost
Riskware.Agent, Riskware.OpenCandy
75.00%

avast!
Win32:Adware-gen [Adw], Win32:Rootkit-gen [Rtk]
75.00%

Dr.Web
Adware.Downware.6712, Adware.OpenCandy.47, Adware.OpenCandy.55
75.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
75.00%

The domain skype.il.joydownload.com has been seen to resolve to the following 4 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
June 7, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
June 7, 2016

54.235.130.12
ec2-54-235-130-12.compute-1.amazonaws.com
July 1, 2015

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
July 1, 2015

File downloads found at URLs served by skype.il.joydownload.com.

1 / 68      (Adware)
http://skype.il.joydownload.com/get_ic_file/wUiS4GnYccXBwj sXP7oQkEsnl0kPTqmHxz1cteQv Q8/yOr4CsrlIUcJgTtbLHuOW29yEZTcWmIEfvkQf9i0bIjzs XFQ2X CjxDk6K6mm0yP/VpMuBwjwVs55ziVdHXmT WWEr19wq4S74C2uQSbVVwJK0PjEZMeptPRNMOan9RCwgJJqbZAkpz6vnGDQkf4Tg2q4/DWOo8gObjvQvDpG3YsOtaWNXnMu5F/t6zkBA/.../eywGS8S7yUpEGXSfB8CgBp RwQyCmIRrTqUXF3JoZnXGsyuMKK1 U7FG8V3mRFWHjkTYEQudCWU=  (skypesetup.exe)

22 / 68    (Adware)
http://skype.il.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqlHB73cteQv E8/yG6sGMxwdoEP0b1Y/j2OXmulRwYayHZCeL ErQzwr5hx8ebBAyavCX7BlS04S tgKzbr9Kbm2BBs8xp10dJF3ylACx3kNEivSH UHHPGeAJ2syiPTYDYqtxdFFPZuyiEj8/ZpuGcwkpz6vlEiw3LNyxkbFkRyz47kjE3/VpDoD K4vuOmNXnMu F/tkxkkH5sv3jlLqb6lzhSflCc1X/Jj4UXKquZaaiGt5OeIcAscvMjwptui1S0U92kPyxdYHGS/.../woojvig==  (skypesetup.exe)

21 / 68    (Adware)
http://skype.il.joydownload.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTqtCly2cteQv I8/2TsqSt4yNEcax6zerC/NXW20lZaMGONGfusW78zyas2nZrIFQfS9S78BlS04zL/3raE6pyYjzYD9Ic7wF9AXmT4SSx 18ku9Dm9Az3NH/.../gAg30pJrvig==  (skypesetup.exe)

21 / 68    (Adware)
http://skype.il.joydownload.com/get_file/wUiS4WnYccXBwj zXP7oQkEsml0kPjq1E1v4ZtbB47xquTC8sGMxwdgEP0bgaan3fHm ykYcdnGHWOOmEqc20bIjzsKXFVrIo3rqBwX9uX 1mZaK55mN8jYP5NUu1h0XRn3kAD1/hoBwqjnxA2mYS/9Wy83zcW5TerJxJR4FIa31V317f9zFZREghrO7UTQuO4/12/.../slnBsH5sv3jFjyfP4s1Gz6UoYYrJupSDrjtpuC2XdpJ NRTsc3P3Ux5arnRFg0nB3p3dxAEyXoBAX1oprvig==  (skypesetup.exe)

0 / 68
http://skype.il.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL3as6Q7qp2uHf14WJ0wclYchuzPfnuNDC2w15KMGCNCeLkErM90ewohJ/fUh6apiX5CEfxsX 4jP3UpZrSlWlZ98xs1kdJF3ymDjRn15hgvn65DyfcAKIJgJLzPHQNa7MgaUFbIaS0XHx1aszMJB8kibPvUSwmcpexiLknBTCws1GMlvxmFsvkJNClLHte1dO/.../rBwfhoojvig==  (skypesetup.exe)

23 / 68    (Adware)
http://skype.il.joydownload.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPTy1E1v4ZtbB47xquTC8sGMxwdgEP0Xkaan3fHm4ykYOaz/ZCeLkErQzyasjn4/dUk/Eu2q4EhO/7Wm0yP/TpMuc1XFA4p8xiUdDRn3kAD91ntF9p2i6BjLQBf4A2syiPTINevppZlhaIaS0XHh1apGNNBBhhqbuAGF8JtGtlq4nBSqwtFDdybcsXdDoYsn3ZXBY3sS5GewslxseroL h0q N/5nnG sBcVP7MW5R3/soZrTkC8qdfUaEZY2YHUiu6GtHhBzzk/.../rFAzwpYjvig==  (skypesetup.exe)

20 / 68    (Adware)
http://skype.il.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsm10kPjuhChOxat/Zp6VvuXf14WJ0wckML0fjaL7uNDC2wl5KdieeEKqtGb8lwqtrh8yeDR7IpnvqBwX9unGtivfDpZrSl2lZ9N1w2hcXRn3 AD9xlMso9i74XGOSA7ZawtW3aGtTPfsgJFsFMKXlV3l2asWNLBoihrOwS2VlJNS7lK9pHGL5uF/.../UlK04Ijvig==  (skypesetup.exe)

21 / 68    (Adware)
http://skype.il.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymGRDxYNras h152b0sDErn8kFbk3lYqn O2G3g15bOHHMQr21E/Y9wLNyxcWbFQfS9S3yHhm0qnD8gfLbvJ6BzzcU5tYiiBZIVny1Tnpnn4Aj/.../o4KRIdMa32UX54asWNLB0onve7TnJwOpf5kuc2BHu7tVvdl7xmBZK3Ypb3LDEAjoj4X7U2lF4f6ILvzgOxLv9nnG sB8VPuJ7nFmvi8JuRniYyBO0KBdFebDtm8PzyVU9zhVW61NdWUHW1FAaqqZvvig==  (skypesetup.exe)

15 / 68    (Adware)
http://skype.il.joydownload.com/get_ic_file/wUiS4GnYccXGwj 0VPevWwllklI8LVv8UVincteQv c8/yan6D1gwJgEJE31ab37OHq yCkKIGjPEe2tCuNun xyz4WXBgib7UyjRQai2y77zrXP 5GNg2gIq5M6kQAKFC/lXyx zcko ir6UmKYRr1cw4TrND0VKOBmPRNMOaz9RHt8ftzFZREmhrO9QXl7ao6x2 8wBHvj4QWR3 BvG5e/IcqnZnhV15ToFO86xk5K/4O h1vyfOwswz6tQMVb5NW5QXjut5aCkW8qYLxREMxobyZ/5fCsXhBgihyitIYNU3mCU0m244Sxj1o3NTHOsGAGnZyBXyb5ARTPg7l1aAL6xyPXBQ4oaXJCFpi7yUpEH3qHU/.../EvNns5xEf9EG3gjfniPq3jOeqJjWvcY6kXsA16EjFfRHwyLCWU=  (skypesetup.exe)

URL:
http://skype.il.joydownload.com/

Title:
“Skype download - הורד את Skype 7.1 בעברית JoyDownload”

Description:
“סקייפ (Skype) - זו היא תוכנה חופשית פשוטה שבה ניתן לבצע שיחות חינם לכל פינות העולם - הורד את הגירסה האחרונה של Skype כאן.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.6 (PHP/5.3.10-1ubuntu3.8)

Facebook:
Shares:  1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.