download.savefrom.net

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download.savefrom.net is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
England, United Kingdom (GB)

Create date:
Wednesday, March 12, 2008

Expires date:
Friday, March 12, 2021

Updated date:
Sunday, March 13, 2016

ASN:
AS13213 HSI-EUROPE Hosting Services Inc,GB

Root domain:

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SaveForm.Optional.Meta (L), PUP.Magicbit.Savefrom.Meta (M), PUP.Magicbit.Downloader.Meta (M), PUP.Magicbit.Savefrom (L)
93.55%

Trend Micro House Call
Suspicious_GEN.F47V0328, Suspicious_GEN.F47V0509
6.45%

McAfee
Artemis!3E89F60688AF
3.23%

avast!
Win32:Malware-gen
3.23%

Emsisoft Anti-Malware
Gen:Variant.Graftor.275935
3.23%

ESET NOD32
Win32/Magicbit.A potentially unwanted application
3.23%

The domain download.savefrom.net has been seen to resolve to the following IP address.

uk.node.quickweb.co.nz
August 10, 2014

File downloads found at URLs served by download.savefrom.net.

1 / 68      (inconclusive)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

3 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

 
Latest 30 of 1,085 download URLs

URL:
http://download.savefrom.net/

SSL certificate subject:
CN=*.savefrom.net, OU=PremiumSSL Wildcard, O="Magicbit, Inc", STREET="901 N. Pitt Street, Suite 325", L=Alexandria, S=VA, PostalCode=22314, C=US

SSL certificate issuer:
CN=COMODO RSA Organization Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
nginx