home

viber.ar.downloadable.co

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain viber.ar.downloadable.co is registered by proxy through ENOM, INC. and was originally registered in June of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the Namecheap, Inc. network.
Registrar:
ENOM, INC.

Server location:
Georgia, United States (US)

Create date:
Thursday, June 19, 2014

Expires date:
Thursday, June 18, 2015

Updated date:
Sunday, November 2, 2014

ASN:
AS22612 NAMECHEAP-NET - Namecheap, Inc., US

Root domain:
downloadable.co

Whois:
1 downloadable.co record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!DD73DFB24F1A, Artemis!453F19639F58
100.00%

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Dr.Web
Adware.Downware.8467
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
100.00%

ESET NOD32
Win32/JoyDownloader
100.00%

AVG
OpenCandy
100.00%

Baidu Antivirus
Adware.Win32.OpenCandy
100.00%

Reason Heuristics
PUP.SevasS.H
100.00%

VIPRE Antivirus
Sevas-S Installer
50.00%

Fortinet FortiGate
Riskware/OpenCandy
50.00%

The domain viber.ar.downloadable.co has been seen to resolve to the following 3 IP addresses.

198.54.117.210
parkingpage.namecheap.com
August 24, 2016

185.53.178.6
May 20, 2016

54.209.211.134
ec2-54-209-211-134.compute-1.amazonaws.com
November 10, 2014

File downloads found at URLs served by viber.ar.downloadable.co.

13 / 68    (Adware)
http://viber.ar.downloadable.co/get_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghv2cteQv E8/yG6sGMxwdoEP0b1Y/j2PXmunxdKOSCGHOO1X xpl Ynh9SWRAaS9T2hVRLlszi1if/Dr97KmiBBop8ixQwWRn3kADh/hsEp yz9WnGSA7ZfwtWhbmMVY/o4KhIdNq/1X3Jtc43EIhEw2vi4RzQuO4/.../Qn3otJSWmi4rJLxCRY4vbSZg8L72VF8j0gS7lNdBGT6nX1 m4Yjvig==  (viber+4.exe)

11 / 68    (Adware)
http://viber.ar.downloadable.co/get_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEh74comb9bp0uHf1 2Jzz9oNKU/labL5NDC2wVRSIDfVWKn7SfxygeVyz4WXAgaDuXaqWQTlszi1if/D8ZrKmiBBpp8ixAwcACngSSx 18kq9DmjAzeLS/9Wys3zNjAVY/o4KRIdZfCrAi89asWNLBgonqPnFjQuO4/x2/.../ecq8ZDJW28uvS7B4yg8eroL8jFLqCPMnwm69B9EIppKpSDrjsJuC3HV0db0AT4I3K30jteWgHQhqzRyz3c8HSnjzDVT5opnvig==  (viber+4.exe)

13 / 68    (Adware)
http://viber.ar.downloadable.co/get_file/wUiS4WnYccXBwj pXP7oQlssmVQ9fDKhEgqnKJyK97Yk5jz0o2xzyNINLETvbrC/NXG20hAcIGjPEeitCrQlyPpqx8yPXlXF7SS7BkT9qnq4mf6SpN/SgzUU/cFlwUdJF3ykACx3l8c79WjwWGmLH/9Ow4TrMD0VL Bse0dIcL38FXB eMTcckJhzP21W2NnJJf5kucwBHv86wia3u1nR5i etDoNiVO1IK3G M2nR0Q6o/9n1O7ZKl/.../V91Wrc2 SWvss5OZkj4rJLxHT5ZrYCN2ounkFxtghATWjo8RUTzlGFi79ojvig==  (viber+4.exe)

13 / 68    (Adware)
http://viber.ar.downloadable.co/get_file/wUiS4WnYccXBwj qXP7oQkEsnV0kOjilERDga5/.../NXC20hIBZnGHWOOhEqc1w7xnw8aPDE b SXqWhmr7C79mf6SpNrSg2FIpYc7wF9AXmTjTix 18ko9Dn7SGjaSr1cwtW1bnRHNOh7alpTIaS0XH91aoiXdE5gnqqnGCQvatqxw Z2BG6woB2WwqszQ9Gve4Gka3tOiZjhSPsv3BcU7ILv6wGqO hlkzLzS5pP5YSxRXP75tnQw251db0aT4U5OHsrt KnGh1qzRyz3c8HSnjzDVT5opnvig==  (viber+4.exe)

The following file have been seen to comunicate with viber.ar.downloadable.co in live environments.

TCP » 185.53.178.6:443
winnerdm.crx

URL:
http://viber.ar.downloadable.co/

Google Analytics:
UA-39421699

Title:
“Viber - Download Viber 4 in english on Downloadable”

Description:
“ Viber – فايبر برنامج جديد رائع للرسائل الفورية والمكالمات الصوتية, برنامج فايبر سيكون متاح ويعمل معك مجانا بمجرد تشغيل الجهاز فى أى مكان متصل بشبكة الإنترنت,إرسل الرسالة الفورية لأصدقائك وستظهر لهم الرساله على الفور إذا كانوا متصلين...”

Web server:
nginx/1.7.6 (PHP/5.5.9-1ubuntu4)

Facebook:
Likes:  22
Shares:  67
Comments:  3

Statistics are for the previous month.

joydownload.co

joydownload.com

joydownload.com.br

joydownload.fr

joydownload.it

joydownload.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.