www.dundown.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.dundown.com is registered by proxy through ENOM, INC. and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Los Angeles, California within the United States which resides on the FDCservers.net network.
Registrar:
ENOM, INC.

Server location:
California, United States (US)

Create date:
Wednesday, May 28, 2014

Expires date:
Thursday, May 28, 2015

Updated date:
Wednesday, May 28, 2014

ASN:
AS6461 ABOVENET - Abovenet Communications, Inc,US

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Softpulse.PluginUpdate.Bundler (M), PUP.Tuguu.Clovermedia.Bundler (M), PUP.Tuguu.PaymentsInteractive.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.Tuguu.Payments.Bundler (M), PUP.Tuguu.Cloverme.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse (M), PUP.Tuguu (M)
98.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.00%

F-Secure
Application:W32/Generic.70053c248f!Online
2.00%

The domain www.dundown.com has been seen to resolve to the following 2 IP addresses.

July 23, 2014

June 5, 2014

File downloads found at URLs served by www.dundown.com.

1 / 68      (Adware)
http://www.dundown.com/.../Java.exe  (4bb89d5e0971a39c42f21e5e32d0358d)

URL:
http://www.dundown.com/

Web server:
nginx/1.6.0