home

download14.cdn.downloadsetup.net

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
downloadsetup.net

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Bandoo
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

Fortinet FortiGate
Riskware/ILivid
100.00%

Reason Heuristics
PUP.Optional.Installer.W
100.00%

VIPRE Antivirus
Threat.5059975, iLivid
100.00%

McAfee
Artemis!D0475DE2AB77
50.00%

Comodo Security
UnclassifiedMalware
50.00%

Dr.Web
Adware.Bandoo.19
50.00%

ESET NOD32
Win32/iLivid.A potentially unwanted application
50.00%

Baidu Antivirus
Adware.Win32.iLivid
50.00%

herdProtect (fuzzy)
a variant of 6d943f711ea920199f3543fe5e5898dd23ddf2f4
50.00%

avast!
Win32:Adware-BYC [PUP]
50.00%

Agnitum Outpost
PUA.Toolbar.SearchSuite
50.00%

ESET NOD32
Win32/iLivid (variant)
50.00%

AVG
Generic
50.00%

The domain download14.cdn.downloadsetup.net has been seen to resolve to the following 4 IP addresses.

23.0.160.221
a23-0-160-221.deploy.static.akamaitechnologies.com
December 13, 2014

23.0.160.216
a23-0-160-216.deploy.static.akamaitechnologies.com
December 13, 2014

23.62.7.160
a23-62-7-160.deploy.static.akamaitechnologies.com
December 3, 2014

23.62.7.136
a23-62-7-136.deploy.static.akamaitechnologies.com
December 3, 2014

File downloads found at URLs served by download14.cdn.downloadsetup.net.

12 / 68    (PUP)
http://download14.cdn.downloadsetup.net/cdn/r/.../iLividSetup-r1720-n-bc.exe  (ilividsetup-r1476-n-bc.exe)

8 / 68      (PUP)
http://download14.cdn.downloadsetup.net/cdn/r/.../iLividSetup-r362-n-bc.exe  (ilividsetup-r2056-n-bi.exe)

The following 27 files have been seen to comunicate with download14.cdn.downloadsetup.net in live environments.

TCP » 23.0.160.216:80
iTunes.exe (iTunes by Apple)

TCP » 23.0.160.216:80
gjjofdeodiofmmdlnbgpeekgefglmkfj.crx

TCP » 23.0.160.216:80
kheplajlialegkhogehgdbhaogeikfag.crx

TCP » 23.0.160.216:80
idipklkclglaeaidmeedenepljfnfbfn.crx

TCP » 23.0.160.216:80
ioeoeknoofgmflombeebbhpddabifcfo.crx

TCP » 23.0.160.216:80
gmhhhiljddfafnapfeffelbdilmmdhma.crx

TCP » 23.0.160.216:80
kheplajlialegkhogehgdbhaogeikfag.crx

TCP » 23.0.160.216:80
bjenifhdbikcfkdibbokmiknmnmcfcjl.crx

TCP » 23.0.160.221:80
Client.exe

TCP » 23.0.160.221:80
hlfogijfbmegbofmdbogbhpdljliijjj.crx

TCP » 23.0.160.221:80
lfjdbboifidomlkoecjbidokhhnjjbji.crx

TCP » 23.0.160.221:80
jdkdeeeeofakflgkdpcfjelkbclmamep.crx

TCP » 23.0.160.221:80
jcbdepdlhakkcblhbbiidelbofmgfgko.crx

TCP » 23.0.160.221:80
ogcbggiopalifiakkabfhjbbkpjmjogo.crx

TCP » 23.0.160.221:80
anpndkkdlijcpphekjnldoohmdgffpin.crx

TCP » 23.0.160.221:80
pjipcpppmpdddcgllbojcgjjbnhbjbko.crx

TCP » 23.0.160.221:80
fcbhafbojhdolhmanlpeoioohgbjekhb.crx

TCP » 23.0.160.221:80
ldofmhlnjkdgcpienoaacjnpckaepfkd.crx

TCP » 23.0.160.221:80
apndclhojdgopcmamgjnapmnkaapkflb.crx

TCP » 23.0.160.221:80
ofbadnfgflalgnlglgchfonmpoiiclig.crx

 
Latest 20 of 29 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.