home

dl.ez-downlaod.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dl.ez-downlaod.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Thursday, February 27, 2014

Expires date:
Monday, February 27, 2017

Updated date:
Wednesday, March 2, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:
ez-downlaod.com

Whois:
4 ez-downlaod.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OUTBROWSE.H, PUP.Ezdownload.H, PUP.Bundler.Adlogica, PUP.Outbrowse.Bundler, PUP.Outbrowse.Bundler (M), PUP.OutBrowse (M), PUP.Outbrowse (M)
100.00%

NANO AntiVirus
Trojan.Win32.Generic.cthmwf
69.23%

Dr.Web
Adware.Downware.2081, Trojan.Packed.27643, Threat.Undefined
69.23%

AVG
MalSign.Generic, Adware MultiBundle.M
61.54%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, Threat.4784459
50.00%

Sophos
OutBrowse Revenyou, PUA 'OutBrowse Revenyou'
46.15%

Avira AntiVirus
APPL/Downloader.Gen, APPL/OutBrowse.lwasp, PUA/Outbrowse.Gen
46.15%

Malwarebytes
PUP.Optional.OutBrowse
42.31%

ESET NOD32
Win32/OutBrowse
38.46%

K7 AntiVirus
Unwanted-Program
38.46%

Fortinet FortiGate
Riskware/OutBrowse
38.46%

ESET NOD32
Win32/OutBrowse.G potentially unwanted application, Win32/OutBrowse.Q potentially unwanted application, Win32/OutBrowse.M potentially unwanted application
34.62%

McAfee
Adware-OutBrowse, Program.Adware-OutBrowse
26.92%

avast!
Win32:Adware-gen [Adw], OutBrowse-H [PUP], OutBrowse-G [PUP], Win32:Rootkit-gen [Rtk], Win32:PUP-gen [PUP]
19.23%

G Data
Win32.Application.Outbrowse, Win32.Application.OutBrowse
19.23%

The domain dl.ez-downlaod.com has been seen to resolve to the following 14 IP addresses.

184.168.221.45
ip-184-168-221-45.ip.secureserver.net
March 4, 2016

141.8.224.239
May 3, 2015

54.243.147.204
ec2-54-243-147-204.compute-1.amazonaws.com
November 30, 2014

54.225.131.91
ec2-54-225-131-91.compute-1.amazonaws.com
November 10, 2014

54.243.165.18
ec2-54-243-165-18.compute-1.amazonaws.com
September 6, 2014

54.225.234.12
ec2-54-225-234-12.compute-1.amazonaws.com
September 4, 2014

54.235.86.178
ec2-54-235-86-178.compute-1.amazonaws.com
June 9, 2014

23.21.74.165
ec2-23-21-74-165.compute-1.amazonaws.com
May 30, 2014

23.23.188.231
ec2-23-23-188-231.compute-1.amazonaws.com
May 21, 2014

23.23.147.248
ec2-23-23-147-248.compute-1.amazonaws.com
May 1, 2014

107.20.163.6
ec2-107-20-163-6.compute-1.amazonaws.com
April 20, 2014

184.73.213.74
ec2-184-73-213-74.compute-1.amazonaws.com
April 13, 2014

50.17.236.38
ec2-50-17-236-38.compute-1.amazonaws.com
April 11, 2014

23.23.158.3
ec2-23-23-158-3.compute-1.amazonaws.com
April 11, 2014

File downloads found at URLs served by dl.ez-downlaod.com.

1 / 68      (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4805&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=54hkktgus5jtbhdudf36mn0ubp0bc65pea826piafkejs23i2sp1-f54d7b58866d698b22f273e2e5430ef9&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

1 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=12&d5=00000000&filename=Firefox  (firefox.exe)

1 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=14&d4=10&d5=00000000&filename=Firefox  (firefox.exe)

4 / 68      (PUP)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=5&d4=6&d5=00000000&filename=Firefox  (firefox.exe)

1 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=2&d3=1&d4=13&d5=00000000&filename=Firefox  (firefox.exe)

1 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=4&d5=00000000&filename=Firefox  (firefox.exe)

1 / 68      (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4811&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=u85je2gdvoajj1b19juneus3blflq2iaq4of8d1r35puoe7khrr0-ddb9c66b200de0f83febd3f0035786fd&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

1 / 68      (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4885&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=vqc7mrquglhb4r75pdshj80ucnhm19q4v5m3nuqj5kqc22usbdu0-45db26b7c0ca13e9e1e55b769b0ab3d0&d=ez-download.com&p=Firefox&pid=3  (get.exe)

14 / 68    (Adware)
http://dl.ez-downlaod.com/.../GetALGK?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=6&d5=00200000&filename=Firefox  (firefox.exe)

17 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4754&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=vukbed49lkgru2m6759vv6qu6k05hvineqvdpia2nftut6vi3bu1-92156b862d7c887092599d674b44aa02&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

18 / 68    (Adware)
http://dl.ez-downlaod.com/.../GetALGK?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=9&d5=00200000&filename=Firefox  (firefox.exe)

16 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4754&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=ejg1g5h3um8klkjca8rf63tituei11qn119finmn6mtm5undcv71-6e448410019b971afa803ab0b3b1b2e7&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

17 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4819&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=5g567s8hlgl8nfrr57onei86bnf64099v22s620c4qipm1n4lqt0-072ed50adc07736a8cd58abdd7440f0b&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

13 / 68    (Adware)
http://dl.ez-downlaod.com/.../GetALGK?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=9&d5=00200000&filename=Firefox  (firefox.exe)

13 / 68    (Adware)
http://dl.ez-downlaod.com/.../GetALGK?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=9&d5=00200000&filename=Firefox  (firefox.exe)

15 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4838&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=u204luslvi6ntjscap0cji66n75mi8lipqgg3u0bhj6k2di74h90-d29dacca5ea3b3c07efbdfe57327c29d&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

10 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4754&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=mr9tb8grqgpr5s8c9d7hbr6kha886cemn9ovjdg3frmncb29ieg0-cc826809110ada1afbfd4712bd1cd95a&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

11 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4804&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=3s7oi6alvk9utbsmv4aagqe73dupuq48odlssjru21fj8ieu1ef1-5c23d3cd5715bb8dc9cfa9f7eef94df8&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

11 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4804&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=hbfqa51d1gil4eosgl197g7e08j9vlgr413ugupjuk1b6g4kgvr0-5c23d3cd5715bb8dc9cfa9f7eef94df8&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

11 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4804&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=5k38cig1ps7que8uv1huajjpo585lobbdl25im2inrs1jgeukae1-5c23d3cd5715bb8dc9cfa9f7eef94df8&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

11 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4804&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=5k38cig1ps7que8uv1huajjpo585lobbdl25im2inrs1jgeukae1-5c23d3cd5715bb8dc9cfa9f7eef94df8&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

11 / 68    (Adware)
http://dl.ez-downlaod.com/DownloadManager/Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4889&filename=Firefox&tyurl=http://www.postdownload.net/.../redirect.php?id=h6hrjcsfaoavh478dvdbca7vk9fgg4d7umgasvfala09p14dfqj0-249dbac80f5e41d1b6ef902dae9c070a&d=ez-download.com&p=Firefox&pid=3  (firefox.exe)

7 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4746&filename=Firefox  (firefox.exe)

9 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=4754&filename=Firefox  (firefox.exe)

6 / 68      (Adware)
http://dl.ez-downlaod.com/.../GetALGK?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=6&d5=00200000&filename=Firefox  (Firefox.exe)

5 / 68      (Adware)
http://dl.ez-downlaod.com/.../GetALGK?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=12&d5=00200000&filename=Firefox  (Firefox.exe)

6 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=3208&l=5187&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=6&d5=00000000&filename=Firefox  (Firefox.exe)

7 / 68      (Adware)
http://dl.ez-downlaod.com/.../Get?p=1955&d=8172&l=3067&n=1&productname=Firefox&d1=12&d2=1&d3=1&d4=12&d5=00010000&filename=Firefox  (Firefox.exe)

The following 100 files have been seen to comunicate with dl.ez-downlaod.com in live environments.

TCP » 184.168.221.45:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.45:80
cineplus-2.8.dv16.11-codedownloader.exe (CinePlus-2.8.dV16.11 by CiPlus2.8gV16.11)

TCP » 184.168.221.45:80
app lid-codedownloader.exe (App Lid by Lid)

TCP » 184.168.221.45:80
a5e63233-bead-40fe-80f4-f7e727ff5a13-11.exe (App Lid by Lid)

TCP » 184.168.221.45:80
e601eec0-83fc-4c8c-9251-df13284c3f5f-4.exe (iWebar)

TCP » 184.168.221.45:80
pvgkof.exe (SmartSaver+ 15 by smart-saverplus)

TCP » 184.168.221.45:80
ekp.exe (VideoMedia+Player_v2.3 by enter)

TCP » 184.168.221.45:80
QQBrowser.exe (by Tencent)

TCP » 184.168.221.45:80
813a0a36-6db1-472d-8f3f-0a513084e963-4.exe (CinePlus-1.2V16.11 by CinemaPlusV16.11)

TCP » 184.168.221.45:80
50d4aed4-2aaa-454f-abde-2027603ed4ce-4.exe (SavePass 1.1 by OB)

TCP » 184.168.221.45:80
0cfe77c0-37bc-47db-8726-9d51ad0df797-4.exe (HD-V2.2V14.11 by InfoHD-V2.2V14.11)

TCP » 184.168.221.45:80
radio canyon-codedownloader.exe (Radio Canyon)

TCP » 184.168.221.45:80
0093e960-5fc4-4c01-ab0a-a085713f6814-7.exe (SavePass 1.1 by OB)

TCP » 184.168.221.45:80
756c1618-babd-4342-a5b7-ff0e28b7e2e0-11.exe (iWebar)

TCP » 184.168.221.45:25
www.exe

TCP » 184.168.221.45:80
756c1618-babd-4342-a5b7-ff0e28b7e2e0-4.exe (iWebar)

TCP » 184.168.221.45:80
pwkqv.exe (VideoMedia+Player_v2.3 by enter)

TCP » 184.168.221.45:80
cineplus-1.2v16.11-codedownloader.exe (CinePlus-1.2V16.11 by CinemaPlusV16.11)

TCP » 184.168.221.45:80
756c1618-babd-4342-a5b7-ff0e28b7e2e0-5.exe (iWebar)

TCP » 184.168.221.45:80
onlineguardian-v2.exe

 
Latest 20 of 103 files

URL:
http://dl.ez-downlaod.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.