The domain download-core.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Arizona, United States (US)
Create date:
Tuesday, July 15, 2014
Expires date:
Wednesday, July 15, 2015
Updated date:
Tuesday, July 15, 2014
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.InformationTechnologySystems.DD, PUP.Installer.InformationTechnologySystemsdoo.R, PUP.Installer.InformationTechnologySystems.R, PUP.installCore.Informat.Installer (M), PUP.InstallCore (L)
92.86%
K7 AntiVirus
Trojan , Unwanted-Program
78.57%
VIPRE Antivirus
Threat.4150696, Threat.4786018, Trojan.Win32.Generic
78.57%
Dr.Web
Trojan.Packed.28409, Trojan.MulDrop5.38104, Trojan.Packed.28587
71.43%
Malwarebytes
PUP.Optional.Downloader, PUP.Optional.InfoTech
71.43%
Avira AntiVirus
ADWARE/InstallCore.Gen9, Adware/InstallCore.aaa
71.43%
ESET NOD32
Win32/InstallCore.PX potentially unwanted application, Win32/InstallCore.QL potentially unwanted application, Win32/InstallCore.PZ potentially unwanted application
71.43%
SUPERAntiSpyware
PUP.InstallCore/Variant
64.29%
F-Prot
W32/InstallCore.AC.gen
64.29%
McAfee
Trojan.Artemis!460ECEB35134, Trojan.Artemis!37216996A8AB
64.29%
herdProtect (fuzzy)
a variant of 4b301a2d05aa6ac48d368c206e025586d6bddef9, a variant of 2033fcc0e96c427d120e7d2b8d82c70a4bd46d3f, a variant of c06e6eef87591455812afb0d970f16bec4b5aaa7
42.86%
NANO AntiVirus
Riskware.Win32.InstallCore.dfgool, Riskware.Win32.InstallCore.dfgmnf, Riskware.Win32.InstallCore.dfgmcg, Riskware.Text.Drop.deckwp
28.57%
Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
21.43%
Sophos
Install Core Click run software, PUA 'Install Core Click run software'
14.29%
The domain download-core.com has been seen to resolve to the following 2 IP addresses.
ip-50-63-202-56.ip.secureserver.net
October 24, 2014
File downloads found at URLs served by download-core.com.
The following 51 files have been seen to comunicate with download-core.com in live environments.
URL:
http://download-core.com/
Title:
“Download Core - Free Software Downloads”
Description:
“Download free software. Safe and 100% virus-free. Software downloads, tutorials, and much more. The website created to help you enjoy the best software.”
Web server:
nginx/1.2.1 (PHP/5.4.4-14+deb7u12)
Related Domains