home

dl.downloadiehietaejahk.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dl.downloadiehietaejahk.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Monday, December 7, 2015

Expires date:
Wednesday, December 7, 2016

Updated date:
Tuesday, December 29, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
downloadiehietaejahk.com

Whois:
3 downloadiehietaejahk.com records

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Firseria.I, PUP.Installer.AppsInstallerSL.b, PUP.Installer.Solimba, PUP.Solimba.AppsInstaller.Installer (M), PUP.Solimba.Firseria.Bundler (M), PUP.Solimba.Bundler, PUP.Solimba.AppsInst.Bundler (M), PUP.Solimba (M)
95.83%

avast!
Win32:Firseria-C [PUP], Win32:Solimba-T [PUP], Win32:Solimba-C [PUP]
10.42%

Dr.Web
Trojan.MulDrop5.34131, Adware.Downware.4436, Trojan.MulDrop5.32888, Trojan.Packed.28116, Trojan.MulDrop5.34145
10.42%

Kaspersky
not-a-virus:AdWare.Win32.Fiseria, not-a-virus:Downloader.Win32.Morstar
10.42%

Avira AntiVirus
TR/Crypt.XPACK.Gen, APPL/Firseria.Gen8, TR/Zusy.95276, PUA/Firseria.grtqw
8.33%

VIPRE Antivirus
Threat.4782980, Threat.4150696
8.33%

G Data
Application.Bundler.Firseria, Gen:Variant.Adware.Kazy.454673, Dropped:Application.Bundler.Firseria, Win32.Application.FirseriaInstaller
8.33%

ESET NOD32
Win32/FirseriaInstaller.M potentially unwanted application, Win32/FirseriaInstaller.J potentially unwanted application, Win32/FirseriaInstaller.I potentially unwanted application
6.25%

Malwarebytes
PUP.Optional.Firseria, PUP.Optional.AppsInstaller, PUP.Optional.Solimba
6.25%

K7 AntiVirus
Unwanted-Program , Trojan
6.25%

F-Prot
W32/A-12dfa170, W32/A-94ac5769, W32/Trojan2.OHDC
6.25%

Agnitum Outpost
PUA.Agent, PUA.Fiseria, Trojan.MulDrop
6.25%

Comodo Security
Application.Win32.Solimba.KUY, Application.Win32.Firseria.AY, Application.Win32.FirseriaInstaller.LMA
6.25%

Sophos
Solimba Installer, PUA 'Solimba Installer'
6.25%

AhnLab V3 Security
PUP/Win32.Firseria, PUP/Win32.FirseriaInstaller
6.25%

The domain dl.downloadiehietaejahk.com has been seen to resolve to the following 23 IP addresses.

213.247.47.190
May 17, 2016

174.137.132.28
January 27, 2016

23.67.250.104
a23-67-250-104.deploy.static.akamaitechnologies.com
May 5, 2015

23.67.250.96
a23-67-250-96.deploy.static.akamaitechnologies.com
May 5, 2015

23.0.160.66
a23-0-160-66.deploy.static.akamaitechnologies.com
March 12, 2015

184.51.126.42
a184-51-126-42.deploy.static.akamaitechnologies.com
February 28, 2015

23.0.160.74
a23-0-160-74.deploy.static.akamaitechnologies.com
December 2, 2014

23.0.160.49
a23-0-160-49.deploy.static.akamaitechnologies.com
December 2, 2014

23.0.160.19
a23-0-160-19.deploy.static.akamaitechnologies.com
December 2, 2014

168.143.242.217
November 1, 2014

168.143.242.218
November 1, 2014

23.62.7.34
a23-62-7-34.deploy.static.akamaitechnologies.com
September 11, 2014

23.62.7.50
a23-62-7-50.deploy.static.akamaitechnologies.com
September 11, 2014

184.29.106.72
a184-29-106-72.deploy.static.akamaitechnologies.com
September 11, 2014

184.29.106.40
a184-29-106-40.deploy.static.akamaitechnologies.com
September 11, 2014

184.51.126.9
a184-51-126-9.deploy.static.akamaitechnologies.com
August 26, 2014

184.51.126.33
a184-51-126-33.deploy.static.akamaitechnologies.com
August 26, 2014

23.67.242.130
July 14, 2014

23.67.242.91
a23-67-242-91.deploy.static.akamaitechnologies.com
July 14, 2014

184.26.44.106
a184-26-44-106.deploy.static.akamaitechnologies.com
July 10, 2014

184.26.44.96
a184-26-44-96.deploy.static.akamaitechnologies.com
July 10, 2014

23.67.243.90
June 13, 2014

23.67.243.51
June 13, 2014

File downloads found at URLs served by dl.downloadiehietaejahk.com.

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.26/.../adobe-reader.exe  (4b57692c0f29f2a217b92b7b036d84b0)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../ocam.exe  (33fbc1c5b86dfe22163e625052053326)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../fraps.exe  (528933016e30828f7b9ff96f4b0d13ad)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../camtasia-studio.exe  (0e31caa977a2b59c03ef4cb013a109b6)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.7/.../utorrent.exe  (9a5f4b624f97371448f55609caf238b1)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.25/.../freemake-video-converter.exe  (ff4db8a2829b203de6099cf490cf2c48)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.26/.../k-lite-mega-codec-pack.exe  (89aba104054f186f488b62e27b409b84)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.25/.../avast-free-antivirus.exe  (6799b84afda1ec379b2ea12e9a638c03)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.26/.../free-flv-converter.exe  (f0ff52ab3cb87844cd2573e9d6e2f8bd)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../winzip.exe  (32098d7140fe930d7f66801d1245123e)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../photoscape.exe  (88d683a1370f88bfcd0f1c3b0693a7d6)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../avast-free-antivirus.exe  (b3be201c3404e107184c9abcd2f7113a)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../atube-catcher.exe  (1e5b37f48436222983f44eb5ab6d13aa)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.26/.../codeblocks.exe  (e8c82355797b6e906c4e6746535319ae)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.7/.../avast-free-antivirus.exe  (7219adf22e39801b924962cb3820138e)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../grand-theft-auto-san-andreas.exe  (a356a6a0a3d59380eb2c2323009f0ffb)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../flv-player-downloader.exe  (c6b6bbf73a693a1d17a71576e193dfd1)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../free-pdf-to-word.exe  (26b4ffbbc5ec75ad1117d9b09a22555e)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../internet-explorer.exe  (95e7d16d260d796b1aff13e8b6ff35ff)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../internet-explorer-9-0.exe  (df36f79d00d2be3046dfbc9d61beb0f5)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../speedyfox.exe  (63e290e5994b2a027d7c07530765aa3e)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../ccleaner.exe  (3ddfebb8da689e6e9647b86c5d4a7e67)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/.../Movavi Video Suite.exe  (918f49013ddb6be78ff5aa612eb54eb1)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/.../Google Chrome.exe  (e966b817d06995bad66153e0ebdc3680)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../skype.exe  (dcc9f3ba4e90f9743957bd384b764157)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.7/.../photoscape.exe  (033bc86021a75b81db192f6b5ea9c4b0)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../Microsoft Security Essentials for XP.exe  (8b72f7132bc7251c68a38d5aa861f86a)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.12.6/.../atube-catcher.exe  (c8e7032709d593c5954cf82a3b98c776)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.23/.../windows-movie-maker.exe  (0c04b6dbeafe4ca6a47c4493179fc9bb)

1 / 68      (Adware)
http://dl.downloadiehietaejahk.com/n/3.1.13.24/.../manycam-virtual-webcam.exe  (63ce15e3df1407b4e4f6188d0ceb8ded)

 
Latest 30 of 58 download URLs

The following 363 files have been seen to comunicate with dl.downloadiehietaejahk.com in live environments.

TCP » 184.26.44.106:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.106:80
crossbrowse.exe (Crossbrowse)

TCP » 184.26.44.96:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.96:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.106:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.106:80
apptrailers.exe

TCP » 184.29.106.40:443
rocket.exe (Rocket by Fast Browsers)

TCP » 184.26.44.96:80
dailywiki.exe

TCP » 184.29.106.40:80
browser.exe (Browser)

TCP » 184.51.126.9:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.96:80
cpx.exe (Google Embedded Application)

TCP » 184.29.106.40:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.29.106.40:80
internet.exe (Internet by Goobzo)

TCP » 184.51.126.33:80
Weather.exe (WeatherBug Desktop by AWS Convergence Technologies)

TCP » 184.26.44.106:80
dailywiki.exe

TCP » 184.26.44.106:80
apptrailers.exe

TCP » 184.29.106.40:80
apptrailers.exe

TCP » 184.51.126.42:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.106:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.96:80
trailerwatch.exe

 
Latest 20 of 384 files

URL:
http://dl.downloadiehietaejahk.com/

Title:
“Loading”

Web server:
nginx/1.8.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.