home

downloadweb2get.com

Felix Meduzku

Domain Information

The domain downloadweb2get.com registered by Felix Meduzku was initially registered in May of 2015 through ONLINENIC, INC.. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ONLINENIC, INC.

Server location:
Oregon, United States (US)

Create date:
Saturday, May 16, 2015

Expires date:
Monday, May 16, 2016

Updated date:
Monday, May 18, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:
1 downloadweb2get.com record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain downloadweb2get.com has been seen to resolve to the following 4 IP addresses.

141.8.226.19
June 19, 2016

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
December 16, 2015

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
December 16, 2015

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
December 16, 2015

File downloads found at URLs served by downloadweb2get.com.

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=N18R3l/Ip8gAmPRJLFvn74E44X8ydmYgRKFZ8KmQLTRCUA4tq1QNbs7buKr4eePHYTtr39oPIS3eMBxSCbJUjI5sZ65RIc0adoA3JwgVqqEOCPKVMbdOXarnM/.../TEESxwPyTxmUatOEVySKN2QUBDo01WxrYl4EnA1o8dY&external_id=1435465600675579658  (toy story 2 game.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=tuFigU7Y0qwBjlhabc8acpQVu pn3SPw/IkWa7AP35L6n8/4dRoliwEj15EYCtPjq/7Sr1lVEvDcSIbfbDuM17 qtD2V9UZfa7xD05QX5fCg5sXebR/n1ef1y3DjNHUd9sE0tpGO4E7n4HJhXIhq6vIRPno0uSsCDv5ZUnZtwM jsLrsM11U9b7YINH0Yv4qEo N FQnPgtibSJkJOWja7UZp9c4rXqKvxHGmIylKbdUejXVLADuvfcfnTe eUSuFxXyhkI6GFQ2VgCRVzY 8I8r3cq2ZUojYNDHYAzCpCg6ZXKVPVQapvxYzNV5wON5AXkxdgAZuJ3WInHF/qBsavNEkN/.../JaAIiKdqzej&external_id=1435465739120878379  (scribblenauts unlimited game.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=lrk79xYSoRvBibcdefXlAx8hXhxBwAsZcm6Wlz20v308wMrLaICXfl6WiACmUHvh84uj0dxSI/w517J5w G9wlZtJsKcGGDjU1GRHMdvQaFNbKZ4AxqJMUTuWlQz9A7goKPwujSti1Zh22HbTM9/Hy7Gnx94GefYF0thbabMHVHd7iBiztBzPJR0GongbKSxwJ /Yeh4JQjoz7qVz8AO3FAYwNCkJJHZryW0qfHP kHAW1qjpn/y3Ok4AujELk5Faip3pFA8Of1rLHeBlXrpiDsxgPWLQub6fuAZu/RH MwSFwBYWNJlBcY8S0IaJXkHER/8PDt/ ZTqI8GuDSI M2 pARRoQ0Zg0RWRXBKK7gGQHubUodUxsTpFOiOziQcV0Cgk9YP4DzznSACqJM4MiwRKiM37RT6k2LoRqU5//.../L3lKvRzkAHwnsD06oN9HLqJRfr4ZzrTQQOazVibgKseuqP3KcfS3NHZJkkCvdgU0E15HiAxVLpU5SrU4exqpFsgg5RaU4OaCFicOnLZLw6P4 f2UpfLbXHBWCs3ESpsjdLWvPxJv61yArE0mZugHkUmjXy7ccXWncC5I0b&external_id=1435467322021145163  (microsoft office 2007 product key professional full download.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=rmi6sRFqKYDq8surpnbZTfddISKU8yggy/Ny7caD5vpHR2nmRTcIRtmPUlKNvgQbDsMPTfJjCHqjs/jg7JRfZRItuUDr14KARq6LTu0nc92xOuUEee2c4TrV5KFs2shNNWPaHn2WUiEP1KxvPFzTNHSKmxsLRKgsidbB51Z6Ec2WHeorc6F3xSuCGM9CMgRjvKwBCw3gqpIgOnMoK0JmQLthbomgBhOKeCjDeRa/hiEP2PU6RvaM 3w5q051kJRzWmvzyyqPsgeEQXoV SFS7lgxbCUvGnx96RcrnFMftRoH7bejCbI1iRApuGQCLxWjxXA6tvaJqByjYcRoM2Tq9xmPS0YijuI2ssMfWpEQ5JK56FJPwJlJSm3A7dIqveeCNb/yu29RyAFTM 1MsmRYxD8IZhdKk0gZHZxuMd35Q1Y8rBjAYXfe6Uilba1AqSROqH4tlwEu/.../nJkmtRRf8t92rLH3DlXlhQHSUCDAo &external_id=1435472052799225149  (friendly fire hacks engine tool.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=HWxhIzVxq9q7VWYSUMFtnGBYnDXUHpMqUblr zAj5el7vUdhxWiDPQQiui3w8880XaXfuo WAtXaM5OVBXwN6vJUD1DOhESgNNJwdBtSWfudQgOFvguC/z2NBoeQnfnsyRfwJbA dIe1P2XCaLp8UgBYlwUBts7hpRH52YLaQmH30XEoRj2FsDhTZ50Y86JaUrI 2 UYeBH7pIThnSFenrYtPDIPdch8paFmR0VXi3iErqY1Cj sMa/dfCMjsCQ1QgfxFoCUd7Xn5ZOwmIaJMsJbQu7sSNs6yJFZFTxRq3XPVQXxzv4BwWG92N3VQjjbL/4Of9JcI24zN/gEiuBrSjuBB4FR8LU2XY boJhI5Rpag42TD2pHeYA t4FyvItaarMrWb84R9XrVTr NvOzGBbGYek80z2OVheDcT8QLWXy31ZtKWnECjnFQdF4047lWHcOeveIzIZCdNWjnyv3Yu5Vohs7VCOmTxWA26We6eC1bQDnKUyNvJvKVkp/AOsPnsAwYXXS1JN5PQ1VR/rHeho31PYhoi3ByWqUFUlw8IfGIddlBiZQ58PwaQmYd4Km9yvKklofWMPGXCbt9vggct8tC362ALlTvM5OL/1eiPgkXmtXKFvmJkqU4tHF T9IMYcJchDjYvpUESspBxWqpgNpxUkCfbsLyrmwi4HVseCe4IpFKvIFqx8Cs/FzxFf0naot1zuinHW4MYZ0oFmzYCwGsuV2rSa3J m2RCm3QlYku2DYG/OfAYm0nsO6DYqM6MxYK34lHfCiKHO8SOwoqLMZNhvKhpS 7pz C/4kopwy16FMx/4p0RAZpyeST/J/W/j6LthOo HrArUi2KTRxXyu9HH 87FTyflwNDxZksmytYclKxZte1OfBoifLSsWEeTbXIUvC/vuT6iVXg7TEOvCLB1NRZpEJ/.../Dicpu  (download.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=oKDKe3mjibxQDcdefAZ9oUrQdS5jZ9vUZ0O6raTKaJSA8qLNFmoFfYHXCnVm59wGAxVsE1aIkB5hEBtW3bk/he8l6orPr6aa8Rp7lK37V7raMVITPr0fH4EhmejB2NvTX3lHoKrO4CsYsiWeXw8zuXFMIG7SkugGfL0Me9bHMKt9G2kp pDpP3C9HlXt5SyuzRNDdpWPjkAgzbnxKO7Fx7vnQbs3a1zNbbmb5YgjsAksrlB6tWrH8h3DPJ/.../yTwFlDd1tit rtkCFZohwRFVnbb8QAgDiy7QNR6fhOEm oxSHRnMTc5IMdye9Noo6o6im0qcTeKdOpXOT5tLMubofirPmSUzlgV Q80I2PTPev1f59T9NVZijl 1X6oCrDUprTv9wjDfPUuhieG&external_id=1435467092052447250  (download.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=thr3H5efpY6rO34567SDwLQj5CumI4bf59Pkp3a/MKQZJe155a6qlkxCjMnULMU351mLG3eQpJPRU7IAzW/.../IahKLwigU1C9WSfRCAoL lMPlKfmx17CzSXazi6brHZ8KUGJA5IztsdIxckq2xDMoO8UqTlDs3fpsrklT4En226d2gv94RNuCrHGCcNbhdssUz1b78p82QrVGbqjaK5ZztYsf0dAVXOa4eoe8ZX1f8UdDmJJraQp1HlBlWthiixRphzyfxwdJjARKPv5pepZzn905FWaGuaepowXtWiaYAJEy371jvrGkXGXv13RdMP8eDRPouGnnoHQM6zfwSSQaGLK8NML eZm9mqzF0tjZs7A4bO3Hgs&external_id=1435461960326196437  (download.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=XMXF6Wq3 BlwuG xztk5IZGHOqjy1cFPbfStdnYOSlNa0vqMrovFBh8LJ70Zu/7xQ/OkjG8 IgN0h3mujAawQAYcH/FGQyrHiWsZqMFsOgud/DpCOu6 yIuFPNj7lA1ydGP7nFd2Q1rNP5cGP9YDyDRt1ZwWUCA1Y9F79aP0uhZmRl7T4uNFqj0stx7JIr3TApOG/bvqNcuNxM5OZu8EeN6BoyP4 IBgnXNMm074LFR5ntHXeIxqsZznwKJTUrcGzDRxJRDk9GDfV2zLbbXX8hSLHT8jaTAa rrkJGKJqiI8H0uDnrEv/D2lIn6/.../mQjn4EWe Trmu0pbIv9JCtlfnR5y0W1KoYUicu6l1qkxCADL RHL2ItGx2SGA&external_id=1435462602805156352  (download.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q=XMXF6Wq3 BlwuG xztk5IZGHOqjy1cFPbfStdnYOSlNa0vqMrovFBh8LJ70Zu/7xQ/OkjG8 IgN0h3mujAawQAYcH/FGQyrHiWsZqMFsOgud/DpCOu6 yIuFPNj7lA1ydGP7nFd2Q1rNP5cGP9YDyDRt1ZwWUCA1Y9F79aP0uhZmRl7T4uNFqj0stx7JIr3TApOG/bvqNcuNxM5OZu8EeN6BoyP4 IBgnXNMm074LFR5ntHXeIxqsZznwKJTUrcGzDRxJRDk9GDfV2zLbbXX8hSLHT8jaTAa rrkJGKJqiI8H0uDnrEv/D2lIn6/.../mQjn4EWe Trmu0pbIv9JCtlfnR5y0W1KoYUicu6l1qkxCADL RHL2ItGx2SGA&external_id=1435462602805156352  (download.exe)

1 / 68      (Malware)
http://downloadweb2get.com/hp/?q= y09XlWYGLOQKYSUMOHp0FD7L0f/9rbKUvfXzINiKdiArl yfo7puknVwRPOcDYG3OiQCySuOfu6Qpoj4ieEPGQ1IfS0rXGHu5hC7l3gAC5qBCZfcgAcjWu3rt0tswStUMeajRXvFoODu8hMqDlSFIWeFzZK1KnSDwJikB/iqAt0QcfZJ6P4TCdV/p6lkelYDwj2d53nc34a mNATdaS6Cx2UiFQ4dowk1kQVc/jIFDI7HOf76Uv5WT/.../ROqCrbCTgFfELJusw7v6IOMrb0mC9pJLUifpN8ccD9FbtwOUI&external_id=1435467657904143578  (gta 5 pc downloader.exe)

The following 2 files have been seen to comunicate with downloadweb2get.com in live environments.

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.