dl.downohqimjjedf0jq.net
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain dl.downohqimjjedf0jq.net is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Massachusetts, United States (US)
Create date:
Thursday, September 19, 2013
Expires date:
Friday, September 19, 2014
Updated date:
Friday, September 27, 2013
ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.FIRSERIASL.X, PUP.FIRSERIASL.F, PUP.Installer.FIRSERIASL.T, PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba (M)
100.00%
Malwarebytes
PUP.Optional.Firseria
14.29%
K7 AntiVirus
Unwanted-Program
14.29%
Agnitum Outpost
PUA.Firseria
14.29%
avast!
Win32:Firseria-A [PUP]
14.29%
Sophos
Solimba Installer
14.29%
Comodo Security
TrojWare.Win32.Trojan.Obfuscated.~EN
14.29%
Dr.Web
Adware.Downware.1433
14.29%
VIPRE Antivirus
DownloadMR
14.29%
Avira AntiVirus
Adware/Fiseria.A
14.29%
AhnLab V3 Security
PUP/Win32.FirseriaInstaller
14.29%
Vba32 AntiVirus
Downware.Morstar
14.29%
ESET NOD32
Win32/FirseriaInstaller (variant)
14.29%
Rising Antivirus
PE:PUF.FirseriaInstaller@CV!1.5C42
14.29%
IKARUS anti.virus
not-a-virus:Downloader.Win32.Morstar
14.29%
The domain dl.downohqimjjedf0jq.net has been seen to resolve to the following 2 IP addresses.
a23-67-243-35.deploy.static.akamaitechnologies.com
December 13, 2013
File downloads found at URLs served by dl.downohqimjjedf0jq.net.
The following 66 files have been seen to comunicate with dl.downohqimjjedf0jq.net in live environments.
URL:
http://dl.downohqimjjedf0jq.net/
Web server:
nginx (PHP/5.3.10-1ubuntu3.9)
