home

www1clickdownloader.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www1clickdownloader.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Sunday, March 25, 2012

Expires date:
Saturday, March 25, 2017

Updated date:
Wednesday, March 30, 2016

Whois:
4 www1clickdownloader.com records

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OneClickDownload.Downloadnow.Bundler (M), PUP.OneClickDownload.Maynemy.Bundler (M), PUP.OneClickDownload.goldple.Bundler (M), PUP.OneClickDownload.Bundler (M), PUP.OneClickDownload (M)
70.00%

ESET NOD32
Win32/Adware.1ClickDownload.AN application, multiple threats, Win32/Adware.1ClickDownload.A.Gen application
42.00%

Dr.Web
Trojan.DownLoader6.9083, Adware.Downware.266, Trojan.DownLoader6.6117, Trojan.DownLoader6.46601, Detection.Undefined
26.00%

AVG
Adware AdInstaller.OneClickDownload
26.00%

F-Prot
W32/SmallTrojan.AQ.gen
12.00%

VIPRE Antivirus
Threat.4150696, Threat.4784938
10.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.00%

F-Secure
Application:W32/Generic.70053c248f!Online
2.00%

The domain www1clickdownloader.com has been seen to resolve to the following 6 IP addresses.

50.63.202.46
ip-50-63-202-46.ip.secureserver.net
April 2, 2016

54.246.120.161
ec2-54-246-120-161.eu-west-1.compute.amazonaws.com
July 1, 2015

50.18.104.209
ec2-50-18-104-209.us-west-1.compute.amazonaws.com
August 17, 2014

184.169.175.49
ec2-184-169-175-49.us-west-1.compute.amazonaws.com
August 1, 2014

50.18.174.205
ec2-50-18-174-205.us-west-1.compute.amazonaws.com
March 20, 2014

204.236.130.106
ec2-204-236-130-106.us-west-1.compute.amazonaws.com
March 6, 2014

File downloads found at URLs served by www1clickdownloader.com.

2 / 68      (inconclusive)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:HKQGM6MDO34TEJCEANKBXKQ4GJD53PCB&tr=udp://.../announce&name=Casto__Immanuel  (casto__immanuel.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=http://www.torrentfrancais.com/.../les-boloss-french-brrip-xvid-ac3-arrows-torrentfrancais.com.torrent&name=Les Boloss.FRENCH.BRRIP.XviD.AC3-ArRoWs  (les_boloss.french.brrip.xvid.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/.../product_download.php?m2=magnet:?xt=urn:btih:IBFBYVJIRDOEGDTDEUSVPMTQVJVML4QJ&name=COD_Call_of_Duty_4_EasyAccount_www_PcHurricane_com_zip  (cod_call_of_duty_4_easyaccount_www_pchurricane_com_zip.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:E5KYNYGULJJ4L4PBDRVVO2IBUXP377LW&tr=udp://.../announce&name=Kevin_e_Perry_a_Ibiza_avi  (kevin_e_perry_a_ibiza_avi.exe)

5 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:EH4SAYIMDOK4BBUA7J2WQ35CF4WIXROZ&tr=http://.../announce&name=Harry_Potter___The_Goblet_Of_Fire  (harry_potter___the_goblet_of_fire.exe)

1 / 68      (inconclusive)
http://www1clickdownloader.com/.../product_download.php?fileName=magnet:?xt=urn:btih:RYCP7NLAP3QUF72YRPRKIBPMUNTA5LCJ&name=principles_of_F_B_and_labor_cost_controls  (principles_of_f_b_and_labor_cost_controls.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?t_url=http://www.torrentfunk.com/.../3651152.torrent&name=slash-made-in-stoke  (slash-made-in-stoke.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:6MHP5I5DANZQDMTURSV2GCDTREFYIAEV&tr=udp://tracker.openbittorrent.com:80/announce&tr=http://exodus.desync.com/announce&tr=http://www.h33t.com:3310/announce&tr=http://tracker.torrentbay.to:6969/announce&tr=http://.../announce&name=SignCut_x2_rar  (signcut_x2_rar.exe)

4 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=http://.../1615532.torrent&name=Harry Potter And The Order Of The Phoenix 2007 BRRip 1080p 6Ch Eng-Hindi  (harry_potter_and_the_order_of_the_phoenix_2007_brrip_1080p_6ch_eng-hindi.exe)

3 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?tlink=http://www.torrenthound.com/.../601f168620b72bd78daef4858b3568ad1b50c41d&name=Harry Potter And The Order Of The Phoenix 2007 BRRip 1080p 6Ch E  (harry_potter_and_the_order_of_the_phoenix_2007_brrip_1080p_6ch_e.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:WMVY22HEHH5GPJF57MJEP2DBIKWAHVUL&tr=udp://tracker.openbittorrent.com:80/announce&tr=udp://tracker.publicbt.com:80/announce&tr=udp://tracker.publicbt.com:80/announce&tr=http://www.h33t.com:3310/announce&tr=http://.../announce&name=American_Idiot  (downloadsetup.exe)

5 / 68      (PUP)
http://www1clickdownloader.com/.../product_download.php?m2=magnet:?xt=urn:btih:ZC6TUXMDE5GY6FNNYUUL2JPMWJR6Z6D5&name=The_Sound_of_Music  (the_sound_of_music.exe)

2 / 68      (Malware)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:QF6GWBEO43SXUETUDGS2S6U3N7XLCROU&tr=http://tracker.torrentbay.to:6969/announce&tr=udp://tracker.openbittorrent.com:80/announce&tr=http://tracker.anime-miako.to:6969/announce&tr=udp://tracker.publicbt.com:80/announce&tr=http://beta.mytracker.me:6969/announce&tr=http://exodus.desync.com/announce&tr=http://www.h33t.com:3310/announce&tr=http://exodus.desync.com:6969/announce&tr=udp://.../announce&name=Dubstep_collection  (dubstep_collection.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=http://.../1312910.torrent&name=Tales Of Lagoona - Orphans Of The Ocean - ASG  (tales_of_lagoona_-_orphans_of_the_ocean_-_asg.exe)

1 / 68      (Adware)
http://www1clickdownloader.com/.../product_download.php?m2=magnet:?xt=urn:btih:VMTFO3MLQCYKERRER5QZE2RBBH3LDUXW&name=Maroon_5_feat__Wiz_Khalifa___Payphone__Single___2012____Mobicareg____HKRG__mp3  (maroon_5_feat__wiz_khalifa___payphone__single___2012____mobicareg____hkrg__mp3.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/.../product_download.php?fileName=magnet:?xt=urn:btih:EX3R24GGIGKPCZF5WLPJBA373TNGO25F&name=johnpersons_com  (johnpersons_com.exe)

4 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?t_url=http://www.torrentfunk.com/.../3125588.torrent&name=brazzers-top-10-most-viewed-all-time-pack-xxx-skila  (brazzers-top-10-most-viewed-all-time-pack-xxx-skila.exe)

1 / 68      (Adware)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:BRJZNR2PYJEP26CPQSRNNGRU7W5F5FTD&tr=udp://tracker.publicbt.com:80/announce&tr=udp://tracker.openbittorrent.com:80/announce&tr=http://tracker.torrentbay.to:6969/announce&tr=http://tracker.dduniverse.net:6969/announce&tr=http://php.hdcmct.com:2710/announce&tr=http://www.h33t.com:3310/announce&tr=http://bigtorrent.org:2710/announce&tr=udp://.../announce&name=NI_LabVIEW_2010_v10_0  (ni_labview_2010_v10_0.exe)

5 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:CTW6HEJFEQMKJG4VRJ7G4KB5YFAAUVAI&tr=http://.../announce&name=Gulmohar_2008_DVDRip_Xvid_AC3_2_0_Sub_XM3  (gulmohar_2008_dvdrip_xvid_ac3_2_0_sub_xm3.exe)

3 / 68      (PUP)
http://www1clickdownloader.com/.../product_download.php?m2=magnet:?xt=urn:btih:B24QWP6JA6HLOCK7A7Y24J4M3LBQP6DA&name=VICKY_DONOR_HINDI_2012_Movie_CD_DVD_HD  (vicky_donor_hindi_2012_movie_cd_dvd_hd.exe)

3 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=http://1337x.org/download/.../&name=The Adventures of Sharkboy and Lavagirl 2005  (the_adventures_of_sharkboy__and_lavagirl_2005.exe)

3 / 68      (PUP)
http://www1clickdownloader.com/.../product_download.php?m2=magnet:?xt=urn:btih:DFZ4C3RE3FVAW2WP5XABXUVG3IFTVYJU&name=Sharkboy___Lavagirl___English_3D_version  (sharkboy___lavagirl___english_3d_version.exe)

1 / 68      (Adware)
http://www1clickdownloader.com/.../product_download.php?fileName=magnet:?xt=urn:btih:5NJ4DH7CMFF27HJRYU2XVHZEZPBUG5H4&name=Adobe_Premiere_Elements_7_0_015___Create_your_own_movies  (adobe_premiere_elements_7_0_015___create_your_own_movies.exe)

1 / 68      (Adware)
http://www1clickdownloader.com/download/product_download.php?fileName=http://1337x.org/download/.../&name=Minecraft Alpha 1.1.2 01 Offline Only - Hybrid(Windows, Mac OS, Linux)  (minecraft_alpha_1.1.exe)

4 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:X3SC3C7GFC6KKFABWQL267NISMSKDOPF&tr=udp://tracker.publicbt.com:80/announce&tr=udp://.../announce&name=Rangam__2011__Telugu_1CD_BRRip_x264_AAC_5_1_ESubs__MTR___www_mastitorrents_com_  (rangam__2011__telugu_1cd_brrip_x264_aac_5_1_esubs__mtr___www_mastitorrents_com_.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?tlink=http://www.torrenthound.com/.../dd71429e0daf08d90a0463b335dcc31cd6eeca63&name=One For The Money 2012 DVDRip XviD-USi  (one_for_the_money_2012_dvdrip_xvid-usi.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:BRFXYLLAXV2P7FG3L5ABU26SYLPCTX33&tr=udp://tracker.openbittorrent.com:80/announce&tr=udp://tracker.publicbt.com:80/announce&tr=http://.../announce&name=PSP_ASSASSIN_S_CREED_iso  (psp_assassin_s_creed_iso.exe)

1 / 68      (Adware)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:X7JJOJCN3ENVP23OK466QVDHSL6MVGI5&tr=http://bigtorrent.org:2710/announce&tr=http://www.h33t.com:3310/announce&tr=http://tracker.torrentbay.to:6969/announce&tr=udp://tracker.openbittorrent.com:80/announce&tr=udp://tracker.publicbt.com:80/announce&tr=http://php.hdcmct.com:2710/announce&tr=http://bttrack.9you.com/:8080/announce&tr=http://tracker.coppersurfer.tk:6969/announce&tr=udp://tracker.ccc.de:80/announce&tr=http://beta.mytracker.me:6969/announce&tr=http://121.14.98.151:9090/announce&tr=http://exodus.desync.com/announce&tr=http://exodus.desync.com:6969/announce&tr=http://.../announce&name=Agent_Vinod__2012__Hindi_Pre_DVDRip_XviD_KiNN  (agent_vinod__2012__hindi_pre_dvdrip_xvid_kinn.exe)

1 / 68      (Adware)
http://www1clickdownloader.com/.../product_download.php?m2=magnet:?xt=urn:btih:JCRRABSWP7HSAEVYR5EBEC75DPNOTC53&name=Infected_Mushroom___Vicious_Delicious__2007__320kbps  (infected_mushroom___vicious_delicious__2007__320kbps.exe)

1 / 68      (PUP)
http://www1clickdownloader.com/download/product_download.php?fileName=magnet:?xt=urn:btih:734JEK4UM2CL6N55VHTYJ7CWLE4POV4T&tr=udp://.../announce&name=lame_enc_dll  (lame_enc_dll.exe)

 
Latest 30 of 63 download URLs

The following 81 files have been seen to comunicate with www1clickdownloader.com in live environments.

TCP » 50.63.202.46:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 50.63.202.46:80
hd+v2.1-codedownloader.exe (HD+v2.1)

TCP » 50.63.202.46:80
635b8fbd-894c-4388-949f-808b54c50f8a-11.exe (HQ-Cinema1.3 by CinemaHQ)

TCP » 50.63.202.46:80
videos mediaplay-air-codedownloader.exe (videos MediaPlay-Air by enter)

TCP » 50.63.202.46:80
57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe (HD+v2.1)

TCP » 50.63.202.46:80
57d05856-1a6c-44dc-9873-1df40136a5ad-11.exe (HD+v2.1)

TCP » 50.63.202.46:80
thetorntv v10-codedownloader.exe (TheTorntv V10 by esc)

TCP » 50.63.202.46:80
hd+v2.1-codedownloader.exe (HD+v2.1)

TCP » 50.63.202.46:80
5c4edacd-4040-4abb-b0cf-1a07192f8f46-4.exe (Object Browser)

TCP » 50.63.202.46:80
ef9eb1df-f680-4256-a623-cf0a11590988-6.exe (Apps Hat by Nero)

TCP » 50.63.202.46:80
TrendsGenius.exe (TrendsGenius)

TCP » 50.63.202.46:80
9b52645e-3270-43ef-8b28-641c299b2721-2.exe (HD+v2.1)

TCP » 50.63.202.46:80
ntsvc.exe (Navigation by Navigation Co.)

TCP » 50.63.202.46:80
ntsvc.exe (Navigation by Navigation Co.)

TCP » 50.63.202.46:80
706467f0-c73a-4265-9740-834f67bfec79-4.exe (videos MediaPlay-Air by enter)

TCP » 50.63.202.46:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.46:80
ntsvc.exe (Navigation by Navigation Co.)

TCP » 50.63.202.46:80
object browser-codedownloader.exe (Object Browser)

TCP » 50.63.202.46:25
www.exe

TCP » 50.63.202.46:80
ntsvc.exe (Navigation by Navigation Co.)

 
Latest 20 of 81 files

URL:
http://www1clickdownloader.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.