dl1.downserver1.com
OutBrowse
Domain Information
The domain dl1.downserver1.com registered by OutBrowse was initially registered in April of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Sherman Oaks, California within the United States which resides on the Unitas Global LLC network.
Registrar:
GODADDY.COM, LLC
Server location:
California, United States (US)
Create date:
Sunday, April 20, 2014
Expires date:
Wednesday, April 20, 2016
Updated date:
Tuesday, June 16, 2015
ASN:
AS4436 AS-NLAYER - nLayer Communications, Inc.
Scanner detections:
Detections (70% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Win.Reputation, Threat.Win.Reputation (M), PUP.SpeedChecker.Optional.Installer.Meta (L), PUP.PINWID.J, Adware.SearchProtect (M)
62.50%
Qihoo 360 Security
HEUR/Malware.QVM06.Gen, Win32/Virus.Downloader.966
37.50%
Baidu Antivirus
Adware.Win32.Conduit, Trojan.Win32.MsiDrop
25.00%
Trend Micro House Call
TROJ_GEN.F47V0514, Suspicious_GEN.F47V0724
25.00%
McAfee
Artemis!B512E6312CA8, Artemis!4225C79B2C51
25.00%
Sophos
OutBrowse Revenyou
25.00%
avast!
Win32:Dropper-gen [Drp], Win32:Malware-gen
25.00%
Malwarebytes
PUP.Optional.SearchProtect.A
12.50%
NANO AntiVirus
Trojan.Win32.Generic.cthmwf
12.50%
Dr.Web
Adware.Downware.2081
12.50%
AhnLab V3 Security
PUP/Win32.OutBrowse
12.50%
K7 AntiVirus
Riskware
12.50%
Zillya! Antivirus
Dropper.MsiDrop.Win32.1
12.50%
AegisLab AV Signature
Troj.W32.Inject
12.50%
The domain dl1.downserver1.com has been seen to resolve to the following 2 IP addresses.
192-124-232-198.static.unitasglobal.net
January 4, 2016
224-124-232-198.static.unitasglobal.net
September 15, 2014
File downloads found at URLs served by dl1.downserver1.com.
The following 60 files have been seen to comunicate with dl1.downserver1.com in live environments.
URL:
http://dl1.downserver1.com/
Web server:
NetDNA-cache/2.2
