home

dl.downloadnet.org

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dl.downloadnet.org is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GoDaddy.com, LLC

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Root domain:
downloadnet.org

Whois:
2 downloadnet.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Adlogica (M), PUP.installCore (M), PUP.AdGazelle (M), PUP.Outbrowse (M), PUP.InstallCore (M)
100.00%

The domain dl.downloadnet.org has been seen to resolve to the following 19 IP addresses.

208.73.211.70
April 8, 2016

141.8.224.239
August 11, 2015

50.63.202.39
ip-50-63-202-39.ip.secureserver.net
July 1, 2015

184.168.221.49
ip-184-168-221-49.ip.secureserver.net
July 1, 2015

184.168.221.38
ip-184-168-221-38.ip.secureserver.net
June 30, 2015

50.63.202.54
ip-50-63-202-54.ip.secureserver.net
June 19, 2015

184.168.221.45
ip-184-168-221-45.ip.secureserver.net
June 19, 2015

50.63.202.61
ip-50-63-202-61.ip.secureserver.net
June 19, 2015

104.20.22.114
May 4, 2015

104.20.23.114
May 4, 2015

104.20.25.114
May 4, 2015

104.20.24.114
May 4, 2015

104.20.26.114
May 4, 2015

162.159.250.146
November 1, 2014

162.159.251.146
November 1, 2014

173.245.61.51
cf-173-245-61-51.cloudflare.com
September 27, 2014

173.245.60.51
cf-173-245-60-51.cloudflare.com
September 27, 2014

104.28.25.112
September 1, 2014

104.28.24.112
September 1, 2014

File downloads found at URLs served by dl.downloadnet.org.

1 / 68      (Adware)
http://dl.downloadnet.org/download/646/.../  (internet_explorer_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/670/.../  (picasa_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/300/.../  (free_download_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/282/.../  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/277/.../  (adobe reader.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/646/.../  (internet_explorer_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/305/.../  (firefox_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/283/.../  (adobe flash.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/276/.../  (adobe_reader_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/305/.../  (firefox_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/300/.../  (free_download_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/282/.../  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://dl.downloadnet.org/download/272/.../  (adobe_flash_ie_setup.exe)

The following 394 files have been seen to comunicate with dl.downloadnet.org in live environments.

TCP » 50.63.202.61:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.45:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.45:80
cineplus-2.8.dv16.11-codedownloader.exe (CinePlus-2.8.dV16.11 by CiPlus2.8gV16.11)

TCP » 50.63.202.54:80
media+playervided2.5-codedownloader.exe (Media+PlayerVidEd2.5 by Enter)

TCP » 50.63.202.54:80
discount_frenzy-codedownloader.exe (Discount_Frenzy by DiscountFrenzy)

TCP » 50.63.202.54:80
3479c191-5ec6-40ac-acb3-48bf04c4eb73-10.exe (Media+PlayerVidEd2.5 by Enter)

TCP » 50.63.202.54:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 50.63.202.54:80
cinplus-2.4cv03.01-codedownloader.exe (CinPlus-2.4cV03.01 by CinPlusV03.01)

TCP » 50.63.202.54:80
da561e24-9a35-4b6e-b6f6-2ab85c64e8f7-11.exe (I - Cinema by DiscountFrenzy)

TCP » 50.63.202.54:80
sense-codedownloader.exe (Sense by Object Browser)

TCP » 184.168.221.38:80
bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 50.63.202.54:80
1bfece60-b696-439b-ba0a-b7d28f77d3c4-6.exe (Sense by Sense+)

TCP » 184.168.221.49:80
jingling.exe

TCP » 50.63.202.61:80
75f7b4c4-185e-480b-938c-ce312e4a0a79-5.exe (iWebar by Webby)

TCP » 50.63.202.54:80
ge-force-codedownloader.exe (Ge-Force by iWebar)

TCP » 50.63.202.54:80
8dc4883b-66ed-4722-868a-56aa10e22976-5.exe (Sense by Object Browser)

TCP » 184.168.221.45:80
app lid-codedownloader.exe (App Lid by Lid)

TCP » 50.63.202.54:80
discount_frenzy-codedownloader.exe (Discount_Frenzy by DiscountFrenzy)

TCP » 184.168.221.45:80
a5e63233-bead-40fe-80f4-f7e727ff5a13-11.exe (App Lid by Lid)

TCP » 50.63.202.54:80
i - cinema-codedownloader.exe (I - Cinema by DiscountFrenzy)

 
Latest 20 of 460 files

URL:
http://dl.downloadnet.org/

Title:
“downloadnet.org”

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.