» download.somedownload.com
Overview
Analysis
IPs Addresses (4)
Downloads (34)
Website Detail

download.somedownload.com

Premium Registration Service (Proxy Registrant)

Domain Information

The domain download.somedownload.com is registered by proxy through IP MIRROR PTE LTD. DBA IP MIRROR and was originally registered in January of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).

Registrant:

Premium Registration Service

Registrar:

IP MIRROR PTE LTD. DBA IP MIRROR

Server location:

Arizona, United States (US)

Create date:

Saturday, January 18, 2014

Expires date:

Wednesday, January 18, 2017

Updated date:

Wednesday, January 6, 2016

ASN:

AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:

somedownload.com

Whois:

2 somedownload.com records

Scanner detections:

Detections (92% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ShetefSolutionsConsulting1998.r, PUP.Installer.Amonetizeltd.V, PUP.Installer.Amonetizeltd.?, PUP.Installer.Amonetizeltd.y, PUP.Win.Reputation

96.15%

Malwarebytes

PUP.Optional.InstallMonetizer, PUP.Optional.Amonetize, PUP.Optional.Amonetize.A

84.62%

ESET NOD32

Win32/Amonetize.AA (variant), Win32/Amonetize.AD (variant), Win32/Amonetize.AE (variant), Win32/Amonetize.AG (variant), Win32/Amonetize.AI (variant)

84.62%

AhnLab V3 Security

PUP/Win32.Amonetiz

80.77%

McAfee

Artemis!6EE57BBE3A49, Artemis!4C74A1B1E4C3, Adware-Amonetize!D10282E7955B, Adware-Amonetize!A344D0D1EA02, Adware-Amonetize!B1F712DE19F0, Adware-Amonetize!AA575499D55E, Artemis!08D64DBFFD39, Artemis!C5F11D9CC1CD, Artemis!23245B5BD52D, Artemis!8032F2C911AF, Adware-Amonetize!B93D7367FC0C, RDN/Generic PUP.x!bxh, Artemis!805FA22E60B3, Artemis!E73EFB444A18, Artemis!4D492568524B, Artemis!2AAF74959705, Artemis!65A5C8A20DE4, Artemis!1DC7D42D0744

73.08%

Avira AntiVirus

ADWARE/Adware.Gen2, ADWARE/Adware.Gen4

73.08%

Dr.Web

Adware.Downware.1575, Adware.Downware.2083, Adware.Downware.1655, Adware.Downware.2467, Adware.Downware.3081, Adware.Downware.3893

65.38%

Trend Micro House Call

TROJ_GEN.F47V0123, TROJ_GEN.F47V0130, TROJ_GEN.F47V0202, TROJ_GEN.F47V0126, TROJ_GEN.F47V0206, TROJ_GEN.F47V0211, TROJ_GEN.F47V0220

65.38%

avast!

Win32:Amonetize-E [PUP], Win32:Amonetize-F [PUP], Win32:Amonetize-L [PUP], Win32:Amonetize-N [PUP], Win32:PUP-gen [PUP]

65.38%

Sophos

Amonetize, Generic PUA JO, Generic PUA FP

65.38%

Fortinet FortiGate

Riskware/Amonetize

53.85%

VIPRE Antivirus

Amonetize, Trojan.Win32.Generic

46.15%

AVG

Generic_r, MalSign.Wilmo, Generic5, Ukra

34.62%

Qihoo 360 Security

HEUR/Malware.QVM10.Gen, Win32/Virus.Adware.932, Win32/Trojan.Multi.daf, HEUR/QVM10.1.Malware.Gen

30.77%

Baidu Antivirus

Adware.Win32.Amonetize

26.92%

The domain download.somedownload.com has been seen to resolve to the following 4 IP addresses.

September 2, 2014

September 2, 2014

February 8, 2014

February 8, 2014

File downloads found at URLs served by download.somedownload.com.

14 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=SFDK Los Veteranos por Wasi www riojatorrent com&ti1=400000&ti2=3&ti3=2014-02-06T18:37:08.219911 00:00 (trojan killer activation code__3515_i339083141_il2529341.exe)

16 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=James Brown Get On Up&ti1=300000&ti2=8&ti3=2014-01-25T11:12:12.916544 00:00 (udk rts starter kit.rar__3516_i283758528_il2574672.exe)

12 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=RUU_Liberty_Cingular_US_1.25.502.2_Radio_47.37.35.09_7.08.35.06_release_128691_signed.exe&ti1=300000&ti2=37&ti3=2014-11-08T08:20:21.894826 00:00 (top.gun.[1986.dual.audio].bdrip.1080p..soundtrack__3515_i1398965885_il1282039.exe)

8 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=driverdoc serial key&ti1=300000&ti2=37&ti3=2014-10-20T09:14:44.668723 00:00 (dnxhd codec for fcp__3038_i1379051551_il3275075.exe)

13 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=16 love hd torrent download free&ti1=300000&ti2=37&ti3=2014-09-27T19:54:55.194962 00:00 (daftar hashmand.rar torrent__3515_i1342835029_il2124787.exe)

1 / 68 (false positive)

http://download.somedownload.com/.../get.php?q=my leftovers - Porcelain and the Tramps&ti1=400000&ti2=1&ti3=2014-03-20T01:01:12.854131 00:00 (shsetup.exe)

8 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Florence The Machine - Lungs - The B-Sides&ti1=400000&ti2=3&ti3=2014-01-20T00:44:01.452453 00:00 (password watch dogs txt__3038_i275310567_il614961.exe)

3 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=tailor the dark horse&ti1=400000&ti2=3&ti3=2014-03-23T20:48:43.182257 00:00 (downloader__3516_i481204406_il5453498.exe)

15 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=(demian007) Line 6 Pod Farm Platinum v 2.5 RTAS VST VST64 (2011)&ti1=905000&ti2=0&ti3=2014-03-31T11:16:37.376280 00:00 (your free net prog.rar__3516_i510257498_il9168028.exe)

11 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=america s next top model season 16&ti1=400000&ti2=3&ti3=2014-02-04T12:15:15.319374 00:00 (download.queen.40leipzig.radio.symphony.orchestra41...bohemian.rhapsody.40fl.torrent...kickasstorren)

14 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=amanda todd flash picture&ti1=400000&ti2=3&ti3=2014-05-15T13:22:13.899580 00:00 (edision argus pingulux firmware__3039_i677456946_il12193630.exe)

14 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=amanda todd flash picture&ti1=400000&ti2=3&ti3=2014-05-15T13:17:26.363425 00:00 (edision argus pingulux firmware__3039_i677456946_il12193630.exe)

14 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=Addis Black Widow ABW [2001]&ti1=905000&ti2=0&ti3=2014-04-01T00:18:04.702386 00:00 (all phone imei unlocker v3 214__3515_i512642588_il9480239.exe)

14 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=Addis Black Widow - Innocent&ti1=905000&ti2=0&ti3=2014-04-01T00:09:03.098003 00:00 (all phone imei unlocker v3 214__3515_i512642588_il9480239.exe)

10 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Guia Sonora de las Aves de Europa&ti1=400000&ti2=3&ti3=2014-02-23T23:00:38.983877 00:00 (idm 6.18 build 7.exe__3038_i380697998_il2870702.exe)

21 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=Delirious : Eddie Murphy Subita (1983) streaming film&ti1=400000&ti2=7&ti3=2014-04-28T13:57:27.068709 00:00 (windows 7 sp1 aio 11in1 [french l multi]__3516_i610284415_il8507300.exe)

12 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=karen kingsbury redemption series order&ti1=400000&ti2=3&ti3=2014-01-31T02:04:55.241744 00:00 (minecraft__4621_il568.exe)

17 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=MS Office 2007 with activation key&ti1=400000&ti2=3&ti3=2014-05-16T20:20:50.593277 00:00 (ms office 2007 with activation key__3038_i683624914_il13653464.exe)

14 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Downloader&ti1=400000&ti2=3&ti3=2014-02-05T02:57:23.309467 00:00 (quickbooks pro 2002 software__3038_i330256060_il767893.exe)

14 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=Inam 2014 Tamil DVDRip XVID PORTOS&ti1=905000&ti2=0&ti3=2014-03-31T17:14:24.643883 00:00 (all phone imei unlocker v3 214__3515_i512642588_il9480239.exe)

10 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Adobe Premiere Pro CS3 (ZWT) KeyGen Only&ti1=400000&ti2=3&ti3=2014-02-27T12:10:15.114549 00:00 (israel map for igo8.rar__3039_i390304017_il4672141.exe)

10 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=WWE Friday Night Smackdown HDTV 2014-03-14 720p AVCHD-SC-SDH&ti1=400000&ti2=3&ti3=2014-03-16T15:03:35.711603 00:00 (launcher__4529_i446914031_il1716158.exe)

5 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Modern Family - Seasons 1-4 - Complete&ti1=400000&ti2=3&ti3=2014-02-13T21:26:32.767906 00:00 (skyhook wifi hack password 2013 zip registration key__3038_i356390957_il5637585.exe)

11 / 68 (PUP)

http://download.somedownload.com/.../get.php?q=Keeping Up With The Kardashians Season 4 Complete&ti1=905000&ti2=0&ti3=2014-04-01T19:57:57.633834 00:00 (id.3 by mr ! hero.rar__3038_i516382226_il469831.exe)

13 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Fruity Loops Studio 10.0.9 Producer Edition ENGLISH Crack&ti1=300000&ti2=8&ti3=2014-03-10T17:48:17.435592 00:00 (obox 11.rar__3516_i424385859_il10002786.exe)

10 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=[MULTI] Joe.Bar.Team.Integrale.BD.French.Ebook&ti1=300000&ti2=8&ti3=2014-02-23T15:59:25.283801 00:00 (idm 6.18 build 7.exe__3038_i380697998_il2870702.exe)

12 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Miami vice mp4 movie free download&ti1=300000&ti2=8&ti3=2014-02-21T16:51:35.606431 00:00 (stkeys gui wpa.exe__3515_i378136245_il2371773.exe)

5 / 68 (Adware)

http://download.somedownload.com/.../get.php?q=Daddys Worst Nightmare 11 XviD SWE6RUS&ti1=400000&ti2=3&ti3=2014-02-14T16:46:28.155042 00:00 (skyhook wifi hack password 2013 zip registration key__3038_i356390957_il5637585.exe)

2 / 68 (false positives)

http://download.somedownload.com/.../get.php?q=Virtually Jenna v3 3 xxx pc games&ti1=400000&ti2=3&ti3=2014-02-07T20:18:44.547796 00:00 (wrar420.exe)

14 / 68 (Adware)

http://download.somedownload.com/mania/.../Full]&ti1=300000&ti2=8&ti3=2014-02-11T20:08:06.159072 00:00 (myod7he.torrent__3516_i349873481_il4588554.exe)

Latest 30 of 34 download URLs

URL:

http://download.somedownload.com/

SSL certificate subject:

CN=sni65186.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.