dl.exfilesdelivery.com

Whois Privacy Shield Services

Domain Information

The domain dl.exfilesdelivery.com registered by Whois Privacy Shield Services was initially registered in November of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
WILLIAM THE CONQUEROR, LLC

Server location:
Massachusetts, United States (US)

Create date:
Friday, November 21, 2014

Expires date:
Monday, November 21, 2016

Updated date:
Thursday, December 3, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BechiroSL.W, PUP.Installer.BechiroSL.E, PUP.Installer.BechiroSL.BB, PUP.Installer.BechiroSL.I, PUP.Installer.BechiroSL.O, PUP.Installer.BechiroSL.U, PUP.Installer.BechiroSL.Q, PUP.Installer.BechiroSL.P, PUP.Installer.Solimba, PUP.Solimba.FIRSERIA.Bundler (M)
100.00%

Comodo Security
Application.Win32.Firseria.AFGH, Application.Win32.Firseria.MAP
64.71%

Agnitum Outpost
PUA.Solimba, PUA.Firseria
64.71%

Avira AntiVirus
APPL/Firseria.Gen8, APPL/FirseriaS.A.1
64.71%

Kaspersky
not-a-virus:AdWare.Win32.Fiseria
64.71%

K7 AntiVirus
Unwanted-Program
64.71%

Sophos
Solimba Installer, PUA 'Solimba Installer'
64.71%

VIPRE Antivirus
Threat.4782980
58.82%

Dr.Web
Trojan.DownLoader11.25003, Trojan.MulDrop5.34677
58.82%

Vba32 AntiVirus
Downware.Morstar
58.82%

AVG
Generic, Adware BundleApp.GN, Adware BundleApp.GW
58.82%

Panda Antivirus
Adware/Firseria
58.82%

MicroWorld eScan
Application.Generic.692267, Gen:Variant.Application.Bundler.Kazy.132995
52.94%

IKARUS anti.virus
AdWare.BundleApp, PUA.MSIL.Solimba
52.94%

NANO AntiVirus
Trojan.Win32.MulDrop5.dcygsx, Riskware.Win32.Fiseria.ddrbqo
47.06%

The domain dl.exfilesdelivery.com has been seen to resolve to the following 8 IP addresses.

February 26, 2016

December 1, 2014

a23-0-160-74.deploy.static.akamaitechnologies.com
September 5, 2014

a23-0-160-33.deploy.static.akamaitechnologies.com
September 5, 2014

a184-51-126-49.deploy.static.akamaitechnologies.com
September 2, 2014

a184-51-126-10.deploy.static.akamaitechnologies.com
September 2, 2014

a23-67-243-43.deploy.static.akamaitechnologies.com
August 13, 2014

August 13, 2014

File downloads found at URLs served by dl.exfilesdelivery.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.exfilesdelivery.com/n/.../Google Chrome.exe  (2d4c70307eec44cea95eb754c0663272)

1 / 68      (Adware)
http://dl.exfilesdelivery.com/n/.../TeamViewer.exe  (c348cf0311ddfc7cd8b4f92dae60a252)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.exfilesdelivery.com/n/.../PhotoScape.exe  (be385d6023aaed0f6ea4013a7ebd5977)

32 / 68    (Adware)

33 / 68    (Adware)

28 / 68    (Adware)
http://dl.exfilesdelivery.com/n/3.1.22.3/.../i-FunBox.exe  (a32dcc4ed9d8ea0af03f5f8f6d5f6cb7)

28 / 68    (Adware)
http://dl.exfilesdelivery.com/n/3.1.22.3/.../PowerDVD.exe  (4b104dedf743f26e7322cfc4ed433b31)

31 / 68    (Adware)

27 / 68    (Adware)

28 / 68    (Adware)

14 / 68    (Adware)

39 / 68    (Adware)

14 / 68    (Adware)
http://dl.exfilesdelivery.com/n/3.1.22.3/.../Java.exe  (d700410fa5a1c5a122c9a58eac0e1de7)

The following 129 files have been seen to comunicate with dl.exfilesdelivery.com in live environments.

 
Latest 20 of 135 files

URL:
http://dl.exfilesdelivery.com/

Google Analytics:
UA-48689684

Title:
“exfilesdelivery.com”

Web server:
nginx

30 of 618 related domains