api.downloadmr.com
FIRSERIA, S.L. (via a Proxy Registrant)
Domain Information
The domain api.downloadmr.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2010. This domain has been seen distributing various forms of adware (some being very aggressive) directly or via bundled installations. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher FIRSERIA, S.L. who is located in Badalona, Barcelona in Spain.
Registrar:
GODADDY.COM, LLC
Server location:
Noord-Holland, Netherlands (NL)
Create date:
Monday, December 20, 2010
Expires date:
Tuesday, December 20, 2016
Updated date:
Monday, October 20, 2014
ASN:
AS16265 FIBERRING LeaseWeb B.V.
Scanner detections:
Adware distribution
Scan engine
Details
Detections
Bkav FE
W32.Clod966.Trojan
50.00%
Reason Heuristics
PUP.InstallX.Bundle
50.00%
ESET NOD32
Win32/Toolbar.Conduit
50.00%
Panda Antivirus
PUP/Conduit.A
50.00%
The domain api.downloadmr.com has been seen to resolve to the following 11 IP addresses.
ec2-52-201-162-61.compute-1.amazonaws.com
May 15, 2016
ec2-52-201-40-16.compute-1.amazonaws.com
May 15, 2016
ec2-52-200-45-104.compute-1.amazonaws.com
April 5, 2016
ec2-52-21-5-35.compute-1.amazonaws.com
April 5, 2016
ec2-52-0-64-164.compute-1.amazonaws.com
March 4, 2016
ec2-52-22-236-126.compute-1.amazonaws.com
March 4, 2016
ec2-52-4-214-140.compute-1.amazonaws.com
February 29, 2016
ec2-52-22-177-73.compute-1.amazonaws.com
February 29, 2016
ec2-52-7-125-65.compute-1.amazonaws.com
February 1, 2016
ec2-52-4-53-6.compute-1.amazonaws.com
February 1, 2016
halw1.1e111.net
March 14, 2014
File downloads found at URLs served by api.downloadmr.com.
The following file have been seen to comunicate with api.downloadmr.com in live environments.
URL:
http://api.downloadmr.com/
Related Domains
