home

skype.pt.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain skype.pt.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Monday, February 6, 2017

Updated date:
Monday, November 9, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
1800download.com

Whois:
1 1800download.com record

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Trojan
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0331, Suspicious_GEN.F47V0325
100.00%

Clam AntiVirus
Win.Trojan.Agent-855157
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Dr.Web
Adware.Downware.10304
100.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
100.00%

G Data
Win32.Adware.OpenCandy
100.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
100.00%

McAfee
Artemis!82A9E120144D, Artemis!D11B03DAA44B
100.00%

AVG
OpenCandy
100.00%

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS
100.00%

NANO AntiVirus
Riskware.Win32.Downloader.dqybkl
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

Sophos
Generic PUA CE
50.00%

The domain skype.pt.1800download.com has been seen to resolve to the following 2 IP addresses.

52.10.34.223
ec2-52-10-34-223.us-west-2.compute.amazonaws.com
February 23, 2016

54.200.233.120
ec2-54-200-233-120.us-west-2.compute.amazonaws.com
February 23, 2016

File downloads found at URLs served by skype.pt.1800download.com.

12 / 68    (PUP)
http://skype.pt.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yOn9np5iNEIJ1Xlar74OXquyxdSNGmeTbb7TOB10bIjzsWXFQ6Q T3zT0zxsmnqw7WI7IzKmjpBoJEyi1dLUnavCjU2nscj7H2jBjaLS/9WycPrJVRcIflnTE1Ldu/pAzIqasWNLBgonuG9RjQuO4/x2/80DW ouRnFn/.../4O h1ryfKl2hSflCc5d5NXvGjqp78DZ3258db0AT4E3Kzx4 aLyDxEihBS6xZkAASeiDAz5sZv2zEI=  (skypesetup.exe)

0 / 68
http://skype.pt.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/zyn9np5iNEMJ1Xka6n3fHm6ykYNeiPVWby1E w9wr1izMKUDgWW/iS7Bkf3smnr0raR8oiR1CEXs55ziVBIRjX8Q34ghshq9C3wSDXGHOgJitXqdD0EYqswLh4dOOz9UnBtLpeScwkpz6vlFiw3G967kbhWWy3/8kSa1Kp D9G3csi8KzVO1IK3HOM2ng8eroL h0q7N/.../yoJz2zEI=  (SkypeSetup.exe)

18 / 68    (PUP)
http://skype.pt.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4Y9bB9bpi/269qGt42doNK1XsK7H/NWH/mQBKOTqGGuGsW782w7NykJ/.../Guwsnhgc7oO h1zyfPwsy3m0CIxX78OxUTqy tHF2XlkIvZdEMxoK3RguuGtD1w42gS7lNdCGT7jBAjwop32zEI=  (skypesetup.exe)

12 / 68    (PUP)
http://skype.pt.1800download.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpqK4fE9rm/4qHpwyd4KK071Y/j2OXmulgsEZjbOCeLkErY90bthwtSWRAaX9T2tRAau i6tgKzbr93amWZPpJY2gF4BXnWtGH0swNEipyH7UmjaSr9W2p64YyUMK7MwJQoMML38FXB8ctyOf08wh LuESw3eYb0w Z2BGi6uEibxbwsWMP0NYDyfXof1cS3D6p/.../4O h1zyfPwsy3m0CIxX78OxURqy tHF XlkIvZdEMxoK3RguuCtD0UinB3z3dpOAWu4WFms5Nn2zEI=  (skypesetup.exe)

18 / 68    (PUP)
http://skype.pt.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylHxrwYNvat h152f0sCw22dBNJ0bterruNDC2xF5KZDrQTvusW782x7Nyh53UR1nSqmu9TFii8C6tgLbbqNPKxzwX9cBykV4BXnWtGDxwldEivSH5UHHAGehOw4TrNT0Va7ogJFsFMKXlECMrasWNLB0onqPmFyUkf5f5kuc0DmOo5gOM3KM9Tdf/LNClLHtZ1dP RqBkyg8eroL/.../yoJz2zEI=  (skypesetup.exe)

12 / 68    (PUP)
http://skype.pt.1800download.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqiHB77cteQv U8/zC24jEwnskFdE3mbLn7NnC5w1VZOSCGGeO1R/YlyPpqw8yPQFXPq3C/T1T8 3G i//D oCb0T8a6NBy30dJF3yiACw2z4ppqznxGWmaSq4fkZPzPG4NabE5bBILOb2hDyYqasWNLBomhrOHSW9lLeanlah1EDzy50jE3/.../7uNKamSYyPu8XV49 M30pouGkDxEihBS6xZkAASeiDAz5sZv2zEI=  (skypesetup.exe)

URL:
http://skype.pt.1800download.com/

Title:
“Gratuito Comunicações download parawindows - 1800Download.com”

Description:
“Baixa grátis Comunicações de 1800Download.com. O site criado para ajudar você a aproveitar Eudora, IncrediMail. Seguro e 100% livre de vírus.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  47
Shares:  140
Comments:  12

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.