home

dl.fasterdownloadthisfile.com

NameFind LLC

Domain Information

The domain dl.fasterdownloadthisfile.com registered by NameFind LLC was initially registered in September of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Tuesday, September 2, 2014

Expires date:
Friday, September 2, 2016

Updated date:
Thursday, April 7, 2016

Root domain:
fasterdownloadthisfile.com

Whois:
2 fasterdownloadthisfile.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.EilioDevelopmentssl.O, PUP.Solimba.EilioDevelopments.Installer (M), PUP.Solimba.EilioDev.Installer (M)
100.00%

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.Kazy.132995
25.00%

Dr.Web
Trojan.DownLoader11.24441
25.00%

ESET NOD32
MSIL/Solimba.AH potentially unwanted application
25.00%

Kaspersky
not-a-virus:Downloader.Win32.Morstar
25.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.Kazy.132995
25.00%

Malwarebytes
PUP.Optional.Solimba
25.00%

NANO AntiVirus
Trojan.Win32.Morstar.dfgpsr
25.00%

Bitdefender
Gen:Variant.Application.Bundler.Kazy.132995
25.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Kazy.132995
25.00%

F-Secure
Gen:Variant.Application.Bundler
25.00%

Avira AntiVirus
APPL/Firseria.Gen8
25.00%

G Data
Gen:Variant.Application.Bundler.Kazy.132995
25.00%

Vba32 AntiVirus
Downware.Morstar
25.00%

AVG
Adware BundleApp.HC
25.00%

The domain dl.fasterdownloadthisfile.com has been seen to resolve to the following 3 IP addresses.

208.73.211.70
April 8, 2016

23.76.204.72
a23-76-204-72.deploy.static.akamaitechnologies.com
November 1, 2014

23.76.204.48
a23-76-204-48.deploy.static.akamaitechnologies.com
November 1, 2014

File downloads found at URLs served by dl.fasterdownloadthisfile.com.

1 / 68      (Adware)
http://dl.fasterdownloadthisfile.com/n/3.1.22.18.5/.../Microsoft Office 2010.exe  (57be6b68e50db9e9ae3995613f84b5bb)

1 / 68      (Adware)
http://dl.fasterdownloadthisfile.com/n/3.1.22.18.4/.../PhotoScape.exe  (5533aca982488620fb2c1603750bfa99)

1 / 68      (Adware)
http://dl.fasterdownloadthisfile.com/n/.../Media Player Classic Home Cinema.exe  (58109da6afdbf1dde1e88eee9945a30f)

33 / 68    (Adware)
http://dl.fasterdownloadthisfile.com/n/3.1.22.18.4/.../Excel Recovery.exe  (fca9ef424adad344cfd71732937887bb)

The following 6 files have been seen to comunicate with dl.fasterdownloadthisfile.com in live environments.

TCP » 208.73.211.70:80
videostream-elfana.crx

TCP » 208.73.211.70:443
droppad.crx

TCP » 208.73.211.70:443
droppad.crx

TCP » 23.76.204.48:80
browser.exe (Co Rom+ Browser by Itim Technologies Co.)

TCP » 23.76.204.48:80
browser.exe (Co Rom+ Browser by Itim Technologies Co.)

TCP » 23.76.204.72:80
browser.exe (Coc Coc Browser by Itim Technologies Co.)

URL:
http://dl.fasterdownloadthisfile.com/

Title:
“fasterdownloadthisfile.com”

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.