dl1.downserver3.com

OutBrowse

Domain Information

The domain dl1.downserver3.com registered by OutBrowse was initially registered in April of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Sherman Oaks, California within the United States which resides on the Unitas Global LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
California, United States (US)

Create date:
Sunday, April 20, 2014

Expires date:
Wednesday, April 20, 2016

Updated date:
Tuesday, June 16, 2015

ASN:
AS4436 AS-GTT-4436 - nLayer Communications, Inc.,US

Root domain:

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.LocalWeather.Z, Threat.Conduit.Installer, PUP.BundledOffer.ItibitiSystemsinc.Installer.Meta (L), PUP.Systweak.ThePhone.Installer.Meta (L), PUP.BundledOffer.BaiduOnlineNetworkTechnologyBeijingCo.Installer.Meta (L), PUP.SystemAlerts (M)
83.33%

Dr.Web
Adware.Mutabaha.80, Adware.Mutabaha.83, Trojan.DownLoader11.48810, Adware.Mutabaha.80, Win32.Sector.12
33.33%

McAfee
Artemis!1921C73BEE27, Artemis!0A7A7259B117, Program.Artemis!9E0B42128315
25.00%

Trend Micro House Call
TROJ_GEN.F47V1203, Suspicious_GEN.F47V1203
16.67%

VIPRE Antivirus
Blinkx/SevereWeatherAlerts, Rocketfuel Installer
16.67%

Malwarebytes
PUP.Optional.StormWatch.A, PUP.Optional.Bundle
16.67%

ESET NOD32
Win32/LiMo (variant)
16.67%

AVG
Generic, Malin
16.67%

Agnitum Outpost
Riskware.Agent
16.67%

AhnLab V3 Security
PUP/Win32.SearchHijacker, PUP/Win32.Amonetize
16.67%

Fortinet FortiGate
Riskware/LiMo, Riskware/Elex
16.67%

Baidu Antivirus
PUA.Win32.LiMo
16.67%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen, HEUR/QVM42.0.Malware.Gen
16.67%

G Data
Win32.Application.Elex
8.33%

K7 AntiVirus
Trojan
8.33%

The domain dl1.downserver3.com has been seen to resolve to the following IP address.

192-124-232-198.static.unitasglobal.net
January 4, 2016

File downloads found at URLs served by dl1.downserver3.com.

4 / 68      (inconclusive)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

10 / 68    (PUP)

10 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

0 / 68
http://dl1.downserver3.com/Installer/.../RegClean2.exe  (d8f1b119544f6de30e09594dfd352a67)

1 / 68      (PUP)

3 / 68      (Adware)

The following 41 files have been seen to comunicate with dl1.downserver3.com in live environments.

 
Latest 20 of 50 files

URL:
http://dl1.downserver3.com/

Web server:
NetDNA-cache/2.2

30 of 39 related domains