dl.flashdownloadnow.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dl.flashdownloadnow.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Myers, Florida within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Florida, United States (US)

Create date:
Friday, September 27, 2013

Expires date:
Sunday, September 27, 2015

Updated date:
Sunday, September 28, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Firseria.R, PUP.Installer.PopelerSystemsl.R, PUP.Solimba.PopelerS.Bundler (M), PUP.Solimba.Bundler, PUP.Solimba.PopelerS.Installer (M)
100.00%

Dr.Web
Trojan.MulDrop5.34131, Trojan.DownLoader11.24441
28.57%

Emsisoft Anti-Malware
Application.Bundler.Firseria, Gen:Variant.Application.Bundler.Kazy.132995
28.57%

ESET NOD32
Win32/FirseriaInstaller.M potentially unwanted application, MSIL/Solimba.AH potentially unwanted application
28.57%

AVG
Adware BundleApp.FO, Generic
28.57%

Avira AntiVirus
TR/Crypt.XPACK.Gen, APPL/Firseria.Gen8
28.57%

VIPRE Antivirus
Threat.4782980
28.57%

MicroWorld eScan
Application.Bundler.Firseria.A, Gen:Variant.Application.Bundler.Kazy.132995
28.57%

Malwarebytes
PUP.Optional.Firseria, .PUP.Optional.Solimba
28.57%

K7 AntiVirus
Trojan , Unwanted-Program
28.57%

F-Prot
W32/A-4fd8b245, W32/A-a2151e6a
28.57%

Kaspersky
not-a-virus:AdWare.Win32.Fiseria, not-a-virus:Downloader.Win32.Morstar
28.57%

Bitdefender
Application.Bundler.Firseria.A, Gen:Variant.Application.Bundler.Kazy.132995
28.57%

Agnitum Outpost
PUA.Agent, PUA.Downloader
28.57%

Lavasoft Ad-Aware
Application.Bundler.Firseria.A, Gen:Variant.Application.Bundler.Kazy.132995
28.57%

The domain dl.flashdownloadnow.com has been seen to resolve to the following 6 IP addresses.

a23-0-160-49.deploy.static.akamaitechnologies.com
December 1, 2014

a23-0-160-19.deploy.static.akamaitechnologies.com
December 1, 2014

a23-62-6-73.deploy.static.akamaitechnologies.com
September 18, 2014

a23-62-6-35.deploy.static.akamaitechnologies.com
September 18, 2014

a184-51-126-32.deploy.static.akamaitechnologies.com
September 9, 2014

a184-51-126-59.deploy.static.akamaitechnologies.com
September 9, 2014

File downloads found at URLs served by dl.flashdownloadnow.com.

1 / 68      (Adware)
http://dl.flashdownloadnow.com/n/.../Epson EasyPrint.exe  (6fd87870c48c890d3addf080109ae305)

1 / 68      (Adware)
http://dl.flashdownloadnow.com/n/.../File_installer.exe  (dabaf9f624d1efd57ef62ea01abee7cf)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

28 / 68    (Adware)

26 / 68    (Adware)

28 / 68    (Adware)

The following 52 files have been seen to comunicate with dl.flashdownloadnow.com in live environments.

 
Latest 20 of 52 files

URL:
http://dl.flashdownloadnow.com/

Web server:
nginx (PHP/5.5.18)