dl2.ez-download.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain dl2.ez-download.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
England, United Kingdom (GB)

Create date:
Tuesday, August 21, 2012

Expires date:
Thursday, August 21, 2014

Updated date:
Wednesday, July 3, 2013

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Downloadster
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Trend Micro House Call
TROJ_GEN.F47V0109
100.00%

Sophos
Ez Toolbar Downloader
100.00%

AegisLab AV Signature
Troj.W32.Gen
100.00%

ESET NOD32
Win32/Toolbar.MyWebSearch (variant)
100.00%

Reason Heuristics
PUP.Installer.Ezdownload.V
100.00%

XVirus List
Win32.Detected
100.00%

herdProtect (fuzzy)
a variant of f1455dbb7cecb88d5a936de503e2b0e5740d04d5
100.00%

avast!
Win32:PUP-gen [PUP]
100.00%

Dr.Web
Adware.Downware.2468
100.00%

AVG
Skodna.Generic
100.00%

The domain dl2.ez-download.com has been seen to resolve to the following 5 IP addresses.

March 14, 2014

March 14, 2014

March 14, 2014

(CloudFlare)
March 14, 2014

March 14, 2014

File downloads found at URLs served by dl2.ez-download.com.

12 / 68    (Adware)
http://dl2.ez-download.com/.../firefox_downloader.exe  (a63191fb3ec67f210437fb4038a6dfa5)

URL:
http://dl2.ez-download.com/

SSL certificate subject:
CN=ssl2662.cloudflare.com, O="CloudFlare, Inc.", L=San Francisco, S=CA, C=US

SSL certificate issuer:
CN=GlobalSign Organization Validation CA - G2, O=GlobalSign nv-sa, C=BE

Web server:
cloudflare-nginx

Alexa:
US rank:  27,228
Global rank:  43,347
Backlinks:  175

Statistics are for the previous month (Alexa statistics are for entire ez-download.com).