home

downloadsf.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain downloadsf.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Berlin, Berlin within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Berlin, Germany (DE)

Create date:
Thursday, May 8, 2014

Expires date:
Monday, May 8, 2017

Updated date:
Thursday, May 8, 2014

ASN:
AS24940 HETZNER-AS Hetzner Online AG,DE

Whois:
1 downloadsf.com record

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.AdvertisoGmbH.L, PUP.Installer.AdvertisoGmbH.U, PUP.installCore.Advertiso.Installer (M), PUP.installCore.Advertis.Installer (M), PUP.installCore (M)
100.00%

VIPRE Antivirus
Threat.4150696
37.50%

K7 AntiVirus
Unwanted-Program
37.50%

Sophos
Install Core Click run software
37.50%

ESET NOD32
Win32/InstallCore.MZ potentially unwanted application
37.50%

AVG
InstallC
37.50%

Dr.Web
Trojan.Packed.28386
37.50%

Malwarebytes
PUP.Optional.Downloader
37.50%

Kaspersky
not-a-virus:AdWare.Win32.InstallCore
37.50%

herdProtect (fuzzy)
a variant of 528fbe34cd5470d77b9dd1d6fe0a3cdb63520b14
25.00%

avast!
Rootkit-gen [Rtk]
12.50%

SUPERAntiSpyware
PUP.InstallCore/Variant
12.50%

McAfee
Trojan.Artemis!8DBB31E3973B
12.50%

Avira AntiVirus
Adware/InstallCore.PY
12.50%

NANO AntiVirus
Riskware.Text.Drop.defxvy
12.50%

The domain downloadsf.com has been seen to resolve to the following 2 IP addresses.

136.243.40.69
static.69.40.243.136.clients.your-server.de
January 27, 2016

144.76.61.188
static.188.61.76.144.clients.your-server.de
August 12, 2014

File downloads found at URLs served by downloadsf.com.

0 / 68
http://downloadsf.com/634en/.../233  (233.htm)

1 / 68      (Adware)
http://downloadsf.com/system/downloads/file2s/000/003/468/.../google-toolbar_setup.exe  (f57873106abf47c103fc15ac7da5ea04)

1 / 68      (Adware)
http://downloadsf.com/system/downloads/file2s/000/066/154/.../skype_setup.exe  (b44b16445ffd366b73621f91e4868a23)

1 / 68      (Adware)
http://downloadsf.com/system/downloads/file2s/000/053/157/.../adblock_setup.exe  (21c9403ca120ea3322c5fcd80d2cfa40)

1 / 68      (Adware)
http://downloadsf.com/system/downloads/file2s/000/003/468/.../google-toolbar_setup.exe  (5659b13ace41364ce29196afd2c9f58c)

1 / 68      (Adware)
http://downloadsf.com/system/downloads/file2s/000/003/468/.../google-toolbar_setup.exe  (e0e196268329ecfbcad464ba1dbb07b6)

17 / 68    (Adware)
http://downloadsf.com/system/downloads/file2s/000/066/155/.../google-chrome_setup.exe  (107840dde2eea02b8d5e56d32771997f)

10 / 68    (Adware)
http://downloadsf.com/system/downloads/file2s/000/051/567/.../google-toolbar_setup.exe  (923636a9fec98f58eb7ec85e72e70f76)

10 / 68    (Adware)
http://downloadsf.com/system/downloads/file2s/000/066/154/.../skype_setup.exe  (4ceb7946f16d555ff863ba8937eeeb5d)

The following 22 files have been seen to comunicate with downloadsf.com in live environments.

TCP » 136.243.40.69:80
browser.exe (Browser)

TCP » 136.243.40.69:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.40.69:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 136.243.40.69:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.40.69:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.40.69:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.40.69:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.40.69:80
Client.exe

TCP » 136.243.40.69:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 136.243.40.69:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.40.69:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.40.69:80
internetenhancer.exe (Internet Enhancer)

TCP » 136.243.40.69:80
sysTPLService.exe (sysTPLService by Tlapia)

TCP » 136.243.40.69:80
Client.exe

TCP » 136.243.40.69:80
client.exe

TCP » 136.243.40.69:80
client.exe (ClientWrapper)

TCP » 136.243.40.69:80
spybot-search-destroy_setup.exe (Program installer by Web)

TCP » 136.243.40.69:80
google-chrome_setup.exe (Generic Application by Software Internet)

TCP » 136.243.40.69:80
bluestacks.exe (Soft by Web Program)

TCP » 136.243.40.69:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 25 files

URL:
http://downloadsf.com/

Title:
“downloadsf.com”

Web server:
Apache/2.4.7 (Ubuntu) (Phusion Passenger 5.0.10)

Facebook:
Shares:  8
Comments:  7

Statistics above are for the previous month of November 2024.

download-links.com

wallpaper-downloader.com

wallpaper-downloader.net

cmsdownload.com

downloadian.com

downloadserver42.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.