home

cdn1.download2desktop.com

OutBrowse LTD

Domain Information

The domain cdn1.download2desktop.com registered by OutBrowse LTD was initially registered in July of 2013 through GODADDY.COM, LLC. The hosted servers are located in Sherman Oaks, California within the United States which resides on the Unitas Global LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
California, United States (US)

Create date:
Monday, July 15, 2013

Expires date:
Friday, July 15, 2016

Updated date:
Thursday, July 16, 2015

ASN:
AS4436 AS-GTT-4436 - nLayer Communications, Inc.,US

Root domain:
download2desktop.com

Whois:
1 download2desktop.com record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Linkury.A
100.00%

VIPRE Antivirus
Adware.Linkury
100.00%

Reason Heuristics
PUP.ReSoft.J
100.00%

McAfee
Artemis!DE89D8867F1E
100.00%

avast!
Win32:SmartBar-A [PUP]
100.00%

Dr.Web
Adware.Downware.1560
100.00%

ESET NOD32
Win32/Toolbar.Linkury (variant)
100.00%

AVG
AdInject.Resoft.dropper
100.00%

The domain cdn1.download2desktop.com has been seen to resolve to the following IP address.

198.232.127.32
32-127-232-198.static.unitasglobal.net
April 16, 2016

File downloads found at URLs served by cdn1.download2desktop.com.

8 / 68      (Adware)
http://cdn1.download2desktop.com/Installer/.../shelper.exe  (installer.exe)

0 / 68
http://cdn1.download2desktop.com/BigFiles/.../nitro_pro9.exe  (setup.exe)

The following 24 files have been seen to comunicate with cdn1.download2desktop.com in live environments.

TCP » 198.232.127.32:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 198.232.127.32:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 198.232.127.32:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 198.232.127.32:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 198.232.127.32:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 198.232.127.32:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 198.232.127.32:443
UCBrowser.exe (by UCWeb)

TCP » 198.232.127.32:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 198.232.127.32:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 198.232.127.32:80
emuletorrent.exe

TCP » 198.232.127.32:80
driverturbosetup.exe

TCP » 198.232.127.32:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 198.232.127.32:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 198.232.127.32:80
emuletorrent.exe

TCP » 198.232.127.32:80
fnafworldsetup.exe

TCP » 198.232.127.32:80
e2e7fd8e8f58544352b274d0fe864c92.exe

TCP » 198.232.127.32:80
browser.exe (Speed Browser by Smart Applications)

TCP » 198.232.127.32:443
secureassist.exe (SecureAssist.exe by SecureAssist)

TCP » 198.232.127.32:80
jingling.exe

TCP » 198.232.127.32:443
online-guardian-v2.0.9.exe

 
Latest 20 of 37 files

URL:
http://cdn1.download2desktop.com/

Web server:
NetDNA-cache/2.2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.