» dl.exfilestransfer.com
Overview
Analysis
IPs Addresses (26)
Downloads (203)
Network (412)
Website Detail
Related Domains (618)

dl.exfilestransfer.com

Whois Privacy Shield Services

Domain Information

The domain dl.exfilestransfer.com registered by Whois Privacy Shield Services was initially registered in November of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.

Registrant:

Whois Privacy Shield Services

Registrar:

HANNIBAL BARCA, LLC

Server location:

Dublin City, Ireland (IE)

Create date:

Friday, November 21, 2014

Expires date:

Monday, November 21, 2016

Updated date:

Thursday, December 3, 2015

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

exfilestransfer.com

Whois:

3 exfilestransfer.com records

Scanner detections:

Detections (96% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.EilioDev.Installer (M), PUP.Solimba (M)

97.92%

VIPRE Antivirus

Threat.4276445

2.08%

ESET NOD32

Win32/Neshta.A virus

2.08%

Microsoft Security Essentials

Threat.Undefined

2.08%

avast!

Win32:Apanas [Trj]

2.08%

Norman

Win32.Neshta.A

2.08%

F-Prot

W32/HLLP.41472

2.08%

Kaspersky

Virus.Win32.Neshta

2.08%

Emsisoft Anti-Malware

Win32.Neshta

2.08%

AVG

Worm/Delf.FF

2.08%

Dr.Web

Win32.HLLP.Neshta

2.08%

The domain dl.exfilestransfer.com has been seen to resolve to the following 26 IP addresses.

54.72.9.51

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com

December 29, 2014

185.53.177.9

December 1, 2014

185.53.177.13

November 29, 2014

23.62.7.33

a23-62-7-33.deploy.static.akamaitechnologies.com

September 10, 2014

23.62.7.9

a23-62-7-9.deploy.static.akamaitechnologies.com

September 10, 2014

23.0.160.41

a23-0-160-41.deploy.static.akamaitechnologies.com

September 7, 2014

23.0.160.26

a23-0-160-26.deploy.static.akamaitechnologies.com

September 7, 2014

184.50.229.137

a184-50-229-137.deploy.static.akamaitechnologies.com

September 7, 2014

184.50.229.177

a184-50-229-177.deploy.static.akamaitechnologies.com

September 7, 2014

184.51.126.32

a184-51-126-32.deploy.static.akamaitechnologies.com

September 6, 2014

184.51.126.56

a184-51-126-56.deploy.static.akamaitechnologies.com

September 6, 2014

23.0.160.11

a23-0-160-11.deploy.static.akamaitechnologies.com

August 25, 2014

184.51.126.50

a184-51-126-50.deploy.static.akamaitechnologies.com

August 20, 2014

184.51.126.64

a184-51-126-64.deploy.static.akamaitechnologies.com

August 20, 2014

23.62.6.59

a23-62-6-59.deploy.static.akamaitechnologies.com

August 19, 2014

184.29.106.82

a184-29-106-82.deploy.static.akamaitechnologies.com

August 17, 2014

184.29.106.91

a184-29-106-91.deploy.static.akamaitechnologies.com

August 17, 2014

23.62.6.66

a23-62-6-66.deploy.static.akamaitechnologies.com

August 17, 2014

23.62.6.40

a23-62-6-40.deploy.static.akamaitechnologies.com

August 17, 2014

23.62.6.81

a23-62-6-81.deploy.static.akamaitechnologies.com

August 17, 2014

23.62.6.51

a23-62-6-51.deploy.static.akamaitechnologies.com

August 17, 2014

23.0.160.72

a23-0-160-72.deploy.static.akamaitechnologies.com

August 16, 2014

23.0.160.65

a23-0-160-65.deploy.static.akamaitechnologies.com

August 16, 2014

23.0.160.74

a23-0-160-74.deploy.static.akamaitechnologies.com

August 16, 2014

23.67.243.24

a23-67-243-24.deploy.static.akamaitechnologies.com

August 13, 2014

23.67.243.19

August 13, 2014

File downloads found at URLs served by dl.exfilestransfer.com.

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../FLV_Media_Player.exe (e6598374450aa8879f486435160d771b)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../WhatsApp pour PC.exe (8609792c2e093f61d1f997609a4a6a2b)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Evochron Mercenary.exe (defb201dfad66fe2ada2d173d077e8ad)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/3.1.22.13.1/.../Adobe Reader.exe (ab246b7136fd1674e884a52032c15ea7)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Microsoft Access 2010.exe (0603839f4cb59de38b2bcaa4ff496e3b)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Candy Crush Saga.exe (e779c94bd2afe1b2d4c7798d2522d4af)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/3.1.22.13.1/.../PrismaTV.exe (fc7ea70fd8a7683c71f29223dff494c4)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Clash of Clans.exe (c206732bc688e1779d19db5a338f0136)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../WhatsApp.exe (4145eaf98dde11661abf346689531f5d)

0 / 68

http://dl.exfilestransfer.com/n/3.1.22.13.1/.../WinRAR.exe (35608b7b371f2bfb1cb24cf2b6d97615)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Yu-Gi-Oh! .exe (yu-gi-oh!.exe)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../File_installer.exe (3976083e98302712f98cfbfa7eed1061)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Whatsapp.exe (1894a5a8f33a268dc1e90d3cc005fb10)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Subway Surfers.exe (ce2cdd6fc1885f3b212178411e65e4d2)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../KIK Messenger.exe (06a0c6e93dd28574db4a8682d8992b1a)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Windows 7.exe (20bab442d39201d3ca6323a25cd89816)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Diamond Rush.exe (02b3baad62bd9f5cb92b4afe2f62951e)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Webcam Toy.exe (99803e750d26be90a444dd50096b314e)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Hay Day.exe (d8d6b6f9f43e85f543e142714518afb3)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../ALBA.exe (b6c9b7cc1bb017295e84991f33b4a29f)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Google Chrome.exe (01c38d5489c3a5e24e3480c68b04f57f)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Google Chrome Beta.exe (3ca7fe5bb1b623b642a6ef99f30a6c4e)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Photoshop.exe (7906f6cbebafe22955d4043267d775ad)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/3.1.22.13.1/.../Free Music Ultimate.exe (e7c3bfab4f45ab988b236c300bb351be)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../iLivid Download Manager.exe (06b98f3dd1ed909900a23e8ca1d5cc69)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/3.1.22.13.1/.../Barra FÃ¡cil.exe (23a35c2c05aaf163c5dc0cce44b1e9b5)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../Arcade Music Box 2.exe (9f28d784d0dbbb6631bb7d5618af8f36)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/3.1.22.13.1/.../Connectify.exe (1d296eb8fdfd54631f0b89ef9c269725)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/.../flash tool for xperia.exe (08e8fa6fdf0c2c98a1b7e8c7febf3859)

1 / 68 (Adware)

http://dl.exfilestransfer.com/n/3.1.22.6/.../Minecraft.exe (2cbd5abbc83f971a71527ffc20821f64)

Latest 30 of 203 download URLs

The following 412 files have been seen to comunicate with dl.exfilestransfer.com in live environments.

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

onedrvup.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80

1799877.exe

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80

optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80

charles.exe (by Apple)

TCP » 54.72.9.51:80

onedrv.exe

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80

install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 184.51.126.50:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

g.jpg

TCP » 54.72.9.51:80

smlb.jpg

TCP » 54.72.9.51:80

smlb.jpg

Latest 20 of 434 files

URL:

http://dl.exfilestransfer.com/

Google Analytics:

UA-48689684

Title:

“exfilestransfer.com”

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

nginx

Related Domains

1freesoftwareonline.com

antivirus-gratuit.pro

anyras.com

app-mak.com

appapia.com

30 of 618 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.