yes-downloads.com
WriteCopy Communications
Domain Information
The domain yes-downloads.com registered by WriteCopy Communications was initially registered in December of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
WriteCopy Communications
Registrar:
GODADDY.COM, LLC
Server location:
Arizona, United States (US)
Create date:
Tuesday, December 17, 2013
Expires date:
Saturday, December 17, 2016
Updated date:
Tuesday, December 29, 2015
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
Threat.Air Software.Bundler, PUP.Air Software.DownloadAssistant.Bundler (M), PUP.Air Software.Download.Bundler (M), PUP.Air Software (M)
100.00%
Dr.Web
Trojan.Vittalia.30
25.00%
Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.AirInstaller
25.00%
VIPRE Antivirus
Threat.4782985
25.00%
F-Secure
Riskware.Gen:Variant.Application.Bundler
25.00%
avast!
Win32:Adware-CKC [PUP]
25.00%
Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.AirInstaller.5
25.00%
Bkav FE
W32.HfsAdware
25.00%
MicroWorld eScan
Gen:Variant.Application.Bundler.AirInstaller.5
25.00%
NANO AntiVirus
Trojan.Win32.Vittalia.dqfrig
25.00%
Bitdefender
Gen:Variant.Application.Bundler.AirInstaller.5
25.00%
Comodo Security
Application.Win32.DownloadAssistant.S
25.00%
G Data
Gen:Variant.Application.Bundler.AirInstaller
25.00%
ESET NOD32
Win32/DownloadAssistant.A potentially unwanted (variant)
25.00%
Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
25.00%
The domain yes-downloads.com has been seen to resolve to the following 3 IP addresses.
ip-184-168-221-47.ip.secureserver.net
January 4, 2016
ekiaioicek.c08.mtsvc.net
April 13, 2014
File downloads found at URLs served by yes-downloads.com.
The following 63 files have been seen to comunicate with yes-downloads.com in live environments.
Subdomains
URL:
http://yes-downloads.com/
Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)
Related Domains
