download.savefrom.net
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain download.savefrom.net is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
England, United Kingdom (GB)
Create date:
Wednesday, March 12, 2008
Expires date:
Friday, March 12, 2021
Updated date:
Sunday, March 13, 2016
ASN:
AS13213 HSI-EUROPE Hosting Services Inc,GB
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.SaveForm.Optional.Meta (L), PUP.Magicbit.Savefrom.Meta (M), PUP.Magicbit.Downloader.Meta (M), PUP.Magicbit.Savefrom (L)
93.55%
Trend Micro House Call
Suspicious_GEN.F47V0328, Suspicious_GEN.F47V0509
6.45%
McAfee
Artemis!3E89F60688AF
3.23%
avast!
Win32:Malware-gen
3.23%
Emsisoft Anti-Malware
Gen:Variant.Graftor.275935
3.23%
ESET NOD32
Win32/Magicbit.A potentially unwanted application
3.23%
The domain download.savefrom.net has been seen to resolve to the following IP address.
uk.node.quickweb.co.nz
August 10, 2014
File downloads found at URLs served by download.savefrom.net.
Latest 30 of 1,085 download URLs
URL:
http://download.savefrom.net/
SSL certificate subject:
CN=*.savefrom.net, OU=PremiumSSL Wildcard, O="Magicbit, Inc", STREET="901 N. Pitt Street, Suite 325", L=Alexandria, S=VA, PostalCode=22314, C=US
SSL certificate issuer:
CN=COMODO RSA Organization Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB