d.down4loading.net

Whois Privacy Corp.

Domain Information

The domain d.down4loading.net registered by Whois Privacy Corp. was initially registered in February of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Salt Lake City, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
Utah, United States (US)

Create date:
Thursday, February 19, 2015

Expires date:
Friday, February 19, 2016

Updated date:
Thursday, February 19, 2015

ASN:
AS29854 WESTHOST - WestHost, Inc.,US

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.42
100.00%

ESET NOD32
Win32/ExpressDownloader.K potentially unwanted application
100.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.42
100.00%

Sophos
PUA 'Smile Files Downloader' (of type Adware)
100.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.42
100.00%

Malwarebytes
PUP.Optional.SmileFiles.A
100.00%

Zillya! Antivirus
Trojan.Black.Win32.26701
100.00%

F-Prot
W32/SmileFiles.A.gen
100.00%

avast!
Win32:Malware-gen
100.00%

Bitdefender
Gen:Variant.Application.Bundler.42
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Comodo Security
Application.Win32.ExpressDown.ZMIL
100.00%

F-Secure
Gen:Variant.Application.Bundler
100.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
100.00%

Avira AntiVirus
APPL/Downloader.Gen4
100.00%

The domain d.down4loading.net has been seen to resolve to the following IP address.

199.195.196.180.static.midphase.com
May 2, 2015

File downloads found at URLs served by d.down4loading.net.

The following 19 files have been seen to comunicate with d.down4loading.net in live environments.

URL:
http://d.down4loading.net/

Web server:
nginx/1.2.1