home

sopcast.joydownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain sopcast.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, March 18, 2013

Expires date:
Saturday, March 18, 2017

Updated date:
Thursday, January 28, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Whois:
2 joydownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/JoyDownloader, Win32/JoyDownloader.D potentially unwanted
100.00%

AVG
Generic, OpenCandy
100.00%

Reason Heuristics
PUP.InnovativeSystems.H, Threat.Installer.InnovativeSystems, PUP.InnovativeSystems.Installer (M), PUP.installCore.Symbolic (M)
100.00%

McAfee
Adware-Opencandy, Artemis!4C45D92C3821, Artemis!2A2CC871B2C2, Artemis!045AAB13437B
87.50%

Malwarebytes
PUP.Optional.OpenCandy
87.50%

Trend Micro House Call
Suspicious_GEN.F47V0716, Suspici.F184F561, ADW_OPENCANDY, Suspici.792C221A
87.50%

avast!
Win32:Malware-gen, Win32:Adware-gen [Adw]
75.00%

Sophos
Generic PUA IA, OpenCandy
75.00%

VIPRE Antivirus
Opencandy, Trojan.Win32.Generic
75.00%

Clam AntiVirus
Win.Trojan.Agent-803351
75.00%

Agnitum Outpost
Riskware.Agent
75.00%

Dr.Web
Adware.OpenCandy.55
75.00%

Trend Micro
ADW_OPENCANDY
75.00%

Avira AntiVirus
APPL/Downloader.Gen
75.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
75.00%

The domain sopcast.joydownload.com has been seen to resolve to the following 6 IP addresses.

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
March 3, 2016

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
March 3, 2016

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
March 12, 2015

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
March 12, 2015

107.22.195.231
ec2-107-22-195-231.compute-1.amazonaws.com
August 12, 2014

23.23.108.120
ec2-23-23-108-120.compute-1.amazonaws.com
August 12, 2014

File downloads found at URLs served by sopcast.joydownload.com.

1 / 68      (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL1as6Q6qNlvCa6sGMxwdgEPx6 PKn3fHm ykZaNnGHWOOhEqdii/k5hpOPDFWb/iv5Dkf un 7iP6SpNrSgyUS9Yc7wF9EXmSlCD9wlMQ79WjwXmmLFuUAndXqdD0GabMgTEdPQP60EmQqMJvcLVgojqv2VmI3c8b40OcnD3ux8VDMlu0sXcave4GkantO3sS1Ge02lF4f74Lv0hvqZel/.../xppv2zEI=  (sopcast.exe)

9 / 68      (Adware)
http://sopcast.joydownload.com/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Gh3zcteQv A8/yOn9np5iNEIJ1Xlarr5P3SuyxdSMGmeX621E/.../oUTqTQbcfwsTrJW5ePKs5bBINOb32VWh0O8TMLAl9z7PvUSwicpe1iLNhUS75oFGMlvxmFtLkJNClLHtZ1dO8GOEgmw8eroL7h0qtJuos1Xm0CJZX78O7RH3qupCVmSdjbbdDT5ZpYDxj7LPuWFg9nB3z3dpOAW Rl6i4N72zEI=  (sopcast.exe)

22 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhr4coOQp h152L0sC8rlY9RagT1Y/j2PHmuhg0MIGjPEe tCrc1wrxgw9SWRAaS9T24VRLlszi1jv/Dr9zQlWdZqtY6h19QAi/7Xyx 18ko/yHoOTzZM 0fjNm0f2IVY/o4KRIdZue3DzgqasWXLBomjaLiESEjeYP5kuc2BHvj6w7dl7xmBpivcsa8ZDJW3sG3D7193F1JvMG4zwTqZel/.../4 pDlzEI=  (sopcast.exe)

22 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsnV0kPj2vHBzga5/.../6Asd8P NNz7JyRO1IK3G M2ylVVtMqon1OhZKtxliuuAs5b6MawAHPruYPU3j4rJLxCT5Y8K3RguuGtD1w42gS7lNdCGT7jBAz2o532zEI=  (sopcast.exe)

7 / 68      (Adware)
http://sopcast.joydownload.com/get_file/wUiS4WnYccXGwj 8XPavWwllklY3NSrER1iBMZ Xq7Z uHf14WJ0wclYchuzPfnuNDC2w15KMGaNCeLkErY90f85kNSWRAaX9T36DkfyuHytgLbbrdPK0jofs55piVRJF3ylACwq19EivSH9UHHeGeIIl4CiJTxEYr84PU1Hc/a1A2h0IcTPIhsriKHmFiYic8b40 cnSi2ouRnFnfV BYC2M8itZWMFhpWvFqounRcH7Irvhhvyb6p/.../QI8Bv47 ASX7uNKanSYyJOkDFtV fW0o8 ikFwgh10Ki3J5OFibzBwj7p572zEI=  (sopcast.exe)

22 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Gh3zcteQv A8/yWn9np5iNELJ1XmbbP4O2G3g15bOHHVQr21E/Y9wbNyxsKPDE b/.../z1ew2CWi5t1zIl7xmBZK3Ypb3LDEAjoj4X7U2lF4f6oLvzge4Pfs20z6tQMVe5NX9Gi37uNKanCYyZbRCQIQ6K3RguuCtD0UinB3z3dpOAWu4WFms5Nn2zEI=  (sopcast.exe)

9 / 68      (Adware)
http://sopcast.joydownload.com/get_file/wUiS4WnYccXBwj zXP7oQkEsml0kPju1E1v4Y9bB9rpi/26nqGl5iNENJ1WnMe/uNDC2xV5KM2aEH 21E/Y9x7Nykp/BUh6avCX5DUzl2yT/.../zGDU2nsUj7Cn4W2aZR65Xi83jPSVDLKs5bBIOOb32RHE8cszENERhnqqnGCEvasKrj7lqSSqouRnFmvV Us3hJJfsfXof1cK3D shng8eroL8jVLqOvM213D3SoofstWwAHPuuYPTxWxzNvUHV49 M3kporfvXUMj2wS7jtdFFyzmAQ3zoZzjzEI=  (sopcast.exe)

36 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Gh3zcteQv c8/zOn/j1gwJgELEbtetijfwDtgxBGZyvZCeLkErc90eYj1s3eDQub7WihUhKo/zitgLbbrdPK0jofs55piVRJF3yhACwg3INwvH7oUTqTQbhdyc/.../slmhUR6Zr2zlL5bqBnw3XlQ5MMp4L5H2vi8JuXkD5jOPYQFMd5K3RguuGtD1w42gS7lNdCGT7jBAz2o532zEI=  (sopcast.exe)

36 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Gh3zcteQv c8/zOn/j1gwJgELEbtetijfwDtgxBGZyvZCeLkErY90f85kNSWRAaX9T36DkfyuHytgLbbrdPK0Tofs55ziVBIRneiAjpxhshq9CnwSCfdUrcfwsbrJTYVY/o4KRIdZue3DzgqasWXLBomjaPkEyYmfYz5kuc2BHv56w7dl6ZmBZn esCkfS4fzcr F 4ujVpMs9yiyhvqZel/.../rBAfhoZ72zEI=  (sopcast.exe)

22 / 68    (Adware)
http://sopcast.joydownload.com/get_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL1as6Q6qNlvCa6sGMxwdgEPwe PKn3fHm5ykZZN2uIH/.../iHZoVu9WwAHPvuYPGxXB0MvRRTsc3OnUxsuemDxEihBS6xZkAASeiDAz5sZv2zEI=  (sopcast.exe)

22 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cp K4fE9tG//qSt4ytsEPxO K/.../UHGYRbRYzNXqdD0FYqttbAoEcKXwXGg4IZCaeVxhnqqnGCUvatyrhf8 TWO4uEjNmO1nR5i5etD4Ni0Jzcr F gllQ92ssiO3Bu8cP89wj6tQMVb5NXtHCW95tOCkW8qZLxRR4E8K3RguuGtD1w42gS7lNdCGT7jBAz2o532zEI=  (sopcast.exe)

16 / 68    (Adware)
http://sopcast.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhz4coqK6bYk5ib0o2l42bhRbTS2K//iajvp0l8bOGCGCar TKc8mrNhz4WXAQaDqme4VQSiqnDmgfTVr93RkmpJo5Q7wF9BXmThU2pnn4Aj CHoWGGYRbxb2syiPTUNeuZxPRNMOaj9RD0mJpqRYVgwh LuFCw3Ltquhbh3HGL5uFnFjv1pBYC2M8ivb3tOi5j XbV11lhXsZr2zlL/ZLg2yGz1UowZ/.../rBAfhoZ72zEI=  (sopcast.exe)

7 / 68      (Adware)
http://sopcast.joydownload.com/get_file/wUia6yjQOMzI2muzUbjxCgggkkU0PTmiGB/ga5/ZtukktDyqsGMxwdkEP0blerC/NXe20gIBbjaeEKqtGbQ90do/hLXMREiPqmetHk20sni1mbaI svTyGlKqtY6hV9QAin7Xms3hshq9CjwSGGcQa5Xi83gNz0VPOBxb0Reeuq1Cmh0O8TJLAlh0 G3Q2Vhao6x2 4/HCnj5kjE3/VpDoC8dcqqa2NXnMu/.../tg2w8eroL8h0r5fKE2nSqsEZoVrp75Fmvi6puRniwmYbJBQoU8MjI=  (sopcast.exe)

The following file have been seen to comunicate with sopcast.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

URL:
http://sopcast.joydownload.com/

Title:
“SopCast - Download SopCast 3.9 in english on JoyDownload”

Description:
“SopCast is popular online TV application - Download SopCast latest version here.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Likes:  24
Shares:  94
Comments:  10

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.