steam.xtremedownload.com
WeDownload, Ltd (via a Proxy Registrant)
Domain Information
The domain steam.xtremedownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2007. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Dublin, Dublin within Ireland. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter. The domain is associated with the publisher WeDownload, Ltd who is located in Nicosia, CY.
Registrar:
GODADDY.COM, LLC
Server location:
Dublin, Ireland (IE)
Create date:
Tuesday, May 15, 2007
Expires date:
Monday, May 15, 2017
Updated date:
Thursday, March 3, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.WeDownload.L, PUP.WeDownload.Bundler (M), PUP.WeDownload (M)
100.00%
VIPRE Antivirus
Threat.4150696, Soft32Downloader
20.00%
avast!
Downloader-TOV [PUP], Win32:Downloader-TOV [PUP]
20.00%
MicroWorld eScan
Application.Bundler.Soft32Downloader.A, Gen:Variant.Adware.Graftor.121372
20.00%
Malwarebytes
PUP.Optional.BundleInstaller.A, PUP.Optional.Soft32.A
20.00%
Bitdefender
Application.Bundler.Soft32Downloader.A, Gen:Variant.Adware.Graftor.121372
20.00%
Dr.Web
Adware.Downware.2498, Worm.Siggen.10085
20.00%
G Data
Application.Bundler.Soft32Downloader, Gen:Variant.Adware.Graftor.121372
20.00%
ESET NOD32
MSIL/Soft32Downloader.A potentially unwanted application, Win32/Soft32Downloader.D potentially unwanted application
20.00%
Qihoo 360 Security
Trojan.Generic, Malware.QVM11.Gen
20.00%
Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.DownloadWare
20.00%
IKARUS anti.virus
PUA.Bundler.Soft32Downloader, AdWare.SuspectCRC
20.00%
AVG
Wedownload, Adware Generic5.AVTV
20.00%
Agnitum Outpost
PUA.Soft32Downloader, Adware.DownloadWare
20.00%
Avira AntiVirus
APPL/Downloader.Gen
20.00%
The domain steam.xtremedownload.com has been seen to resolve to the following 10 IP addresses.
ec2-52-208-66-250.eu-west-1.compute.amazonaws.com
September 13, 2016
ec2-52-19-104-236.eu-west-1.compute.amazonaws.com
September 13, 2016
ec2-54-194-255-153.eu-west-1.compute.amazonaws.com
September 13, 2016
ec2-54-194-84-36.eu-west-1.compute.amazonaws.com
September 13, 2016
ec2-50-16-204-217.compute-1.amazonaws.com
May 15, 2016
ec2-50-17-197-66.compute-1.amazonaws.com
February 13, 2016
ec2-50-19-214-118.compute-1.amazonaws.com
February 13, 2016
ec2-107-21-127-194.compute-1.amazonaws.com
July 10, 2014
ec2-50-16-187-48.compute-1.amazonaws.com
July 10, 2014
ec2-50-16-228-70.compute-1.amazonaws.com
July 10, 2014
File downloads found at URLs served by steam.xtremedownload.com.
URL:
http://steam.xtremedownload.com/
Google Analytics:
UA-40461038
Title:
“Download Steam Free”
Network:
Amazon Web Services (AWS), running an EC2 instance
Statistics are for the previous month.