home

dl.media1987static.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
media1987static.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.POPELERSYSTEMSL.I
100.00%

Dr.Web
Adware.Downware.8808
100.00%

AVG
Adware BundleApp_r.AV
100.00%

ESET NOD32
MSIL/Solimba.AH potentially unwanted application
100.00%

avast!
Win32:Solimba-S [PUP]
100.00%

VIPRE Antivirus
Threat.4782980
100.00%

Emsisoft Anti-Malware
Trojan.Generic.12129748
100.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.Kazy.132995
100.00%

Quick Heal
Adware.Firseria.A5
100.00%

Malwarebytes
PUP.Optional.Solimba
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Trojan.Win32.Morstar.dhfavo
100.00%

F-Prot
W32/A-a1e0d357
100.00%

Comodo Security
Application.Win32.Solimba.LSW
100.00%

Sophos
PUA 'Solimba Installer'
100.00%

The domain dl.media1987static.com has been seen to resolve to the following 2 IP addresses.

184.51.126.88
a184-51-126-88.deploy.static.akamaitechnologies.com
January 9, 2015

184.51.126.97
a184-51-126-97.deploy.static.akamaitechnologies.com
January 9, 2015

File downloads found at URLs served by dl.media1987static.com.

32 / 68    (Adware)
http://dl.media1987static.com/n/3.2.2/.../Ccleaner.exe  (2ba91d5226394ee0e60f352b7a25ad41)

The following 67 files have been seen to comunicate with dl.media1987static.com in live environments.

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.97:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.88:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.97:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 184.51.126.88:443
messengertime.exe

TCP » 184.51.126.88:443
lavasofttcpservice.exe (LavasoftTcpService.exe by Lavasoft Limited)

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.97:80
browser.exe (Browser)

TCP » 184.51.126.88:80
fncpaaieeiaohkapjbfmdmjbkbkbfnbd.crx

TCP » 184.51.126.88:80
hmcfkjhogndmigfiomdmchbhdffmnmco.crx

TCP » 184.51.126.88:80
gonhbmmdecflmpadlhfpekccabfemmpc.crx

TCP » 184.51.126.88:80
hlfdogigjjjbaidoadefefpjfocpeidp.crx

TCP » 184.51.126.88:80
wordwizard-setup-1.10.0.24.exe (WordWizard)

TCP » 184.51.126.88:80
pmhdmfepimennolmbniggkidpnfkkoop.crx

TCP » 184.51.126.88:80
kpbfmealepempncchfhfobaepfoonkoa.crx

TCP » 184.51.126.88:80
ocegienblhabhoodnlmnobjmkejeeijf.crx

 
Latest 20 of 79 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.