home

virtualdj.es.1800download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain virtualdj.es.1800download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Oregon, United States (US)

Create date:
Friday, February 6, 2015

Expires date:
Monday, February 6, 2017

Updated date:
Monday, November 9, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
1800download.com

Whois:
1 1800download.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!93465A896B71, Artemis!27D9DAFF8055, Program.Artemis!C40FC4A0A9DA
100.00%

Dr.Web
Adware.Downware.10304
100.00%

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS, PUP.OpenCandy.Installer (L)
100.00%

Malwarebytes
PUP.Optional.OpenCandy
66.67%

K7 AntiVirus
Trojan
66.67%

Trend Micro House Call
Suspicious_GEN.F47V0415, TROJ_GEN.R047H05EJ15
66.67%

Clam AntiVirus
Win.Trojan.Agent-855157
66.67%

Agnitum Outpost
Riskware.Agent
66.67%

VIPRE Antivirus
Sevas-S Installer, Trojan.Win32.Generic
66.67%

AhnLab V3 Security
PUP/Win32.OpenCandy
66.67%

G Data
Win32.Adware.OpenCandy
66.67%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
66.67%

AVG
OpenCandy
66.67%

Panda Antivirus
PUP/OpenCandy
66.67%

Sophos
OpenCandy
33.33%

The domain virtualdj.es.1800download.com has been seen to resolve to the following 2 IP addresses.

52.10.34.223
ec2-52-10-34-223.us-west-2.compute.amazonaws.com
February 22, 2016

54.200.233.120
ec2-54-200-233-120.us-west-2.compute.amazonaws.com
February 22, 2016

File downloads found at URLs served by virtualdj.es.1800download.com.

17 / 68    (PUP)
http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqiGh/zcteQv A8/yWn9np5iNELJ1XgarL8OGG3g15bOHHVQr21E/Y9wbNyx8WPDE b SXqWQ634Tnqmf6IpNjck2pPoJA0hFVJF3ykACw2zZc79XLwW2uSA7ZdyM3zY25EKOVjZl1Nb738FXB2ctyIf1lmyfC4Rnw3c8b41ecnWDDm50jE3/.../JKRIBo46M21k6bzzQl0inB3z3d9OAWilFAawqZvu1Q43NTHOvmAGi4aPZCfqV0qegvh1ewbzxyqa  (install_virtualdj_pc_v8.0.2094.exe)

4 / 68      (PUP)
http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklQyNSr Rlu2MYCP2qVvryG78zQmkbROfiihYKX8IXG8yVBGZyvZCeLkErc90eYj1s3eDQub7WihUhKo/zitgLbbrdPKyDofs55ziVdIRnWkGDU2nsAj7GujDnGSA7ZZwtXmNT4Hb6s5bBIJOb2hCSYrLYzcLVgojqv2FiU3c8b40 cnSi2ouRnFnfV BYC2M8itZWMfhpWvFrAunhUeroL h0q N/.../J6bwLw0Sqa  (install_virtualdj_pc_v8.0.2094.exe)

15 / 68    (PUP)
http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPDu1E1v4YtbB6qAk5ib0pWJgjIJQeRigK6n3fHm/ykYYazeeEKqtHb8lxLtpxMGPDE b/CXqTx jqnDmgfTZpZrSkGNBs8FpwBUeBT/iSGJnn4Aj9yHoHDrbBPkNlJO7JTxEYr04PU5Wb/rlXTl1e8rENEJ8z W1TnpKPtywlahkUj3g3Rqc87lkGpKjcsKna28Jl5SvFqoumRcHu9eh2Q26fKE2nS6sEcte/Mz4SX/.../B YxDxxyqa  (install_virtualdj_pc_v8.0.2094.exe)

15 / 68    (PUP)
http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKhEgqkP4CH4KEk5ib0oGJgz9gcJgTtbLHuaSrglUZTcWmPH O1Qet0h g8mKnbXk7Vun6kWByY CjQzf3PrsfakWpPv8B41kdJF3ylACwx0NEivSH7UHGYUrcfwsXrJWhEerJxJR8FIeiuCC4gP43cLVgojaHuAHJ8O8WugKRwTDWouRnFlfV Qsv/NIf/MyUGzcr F oujVtMuZr2zlL ZLh3lSmkBM5P5YSxQHP788jEiCdjbbNJV4M/MH8kounkFxlrnE/.../woIjvhAUjNGCR8CpNn4zBOyuiREXfgPJ4bQXz1Cqa  (install_virtualdj_pc_v8.0.2094.exe)

URL:
http://virtualdj.es.1800download.com/

Title:
“VirtualDJ - Descarga VirtualDJ 8 en Español en el sitio 1800Download.com”

Description:
“VirtualDJ es una de las mejores aplicaciones profesionales para mezclar audio y vídeo - Descarga la ultima versión de VirtualDJ aquí.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  3
Shares:  8

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.