home

downprov1.dynadownload.com

Whois Privacy Corp.

Domain Information

The domain downprov1.dynadownload.com registered by Whois Privacy Corp. was initially registered in October of 2014 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Singapore, Singapore within Singapore which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
INTERNET.BS CORP.

Server location:
Singapore, Singapore (SG)

Create date:
Sunday, October 12, 2014

Expires date:
Monday, October 12, 2015

Updated date:
Sunday, October 12, 2014

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:
dynadownload.com

Whois:
1 dynadownload.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
infected with Trojan.Amonetize.353, infected with Trojan.Amonetize.2503, Detection.Undefined
100.00%

VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
85.71%

Clam AntiVirus
Win.Adware.Amonetize-511, Win.Adware.Amonetize-703
85.71%

McAfee
Artemis!8F00B3F9F161, Artemis!9665FBF1E70C, Artemis!1B883BF9939D, Trojan.Artemis!F9ADC5495FA7, Artemis!E4348AE65CE6, Artemis!B2D69159BDBD
85.71%

Malwarebytes
PUP.Optional.Amonetize
71.43%

Trend Micro House Call
TROJ_GEN.R047C0OLU14, TROJ_SPNR.08LT14, TROJ_SPNR.08A615, TROJ_GEN.R0C1H05A315, TROJ_GE.28D9CDA2
71.43%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
71.43%

Trend Micro
TROJ_GEN.R047C0OLU14, TROJ_SPNR.08LT14, TROJ_SPNR.08A615, TROJ_GE.28D9CDA2
71.43%

G Data
NSIS.Application.Crypted
71.43%

Baidu Antivirus
Adware.Win32.Amonetize, PUA.Win32.Amonetize
71.43%

AVG
Generic
71.43%

Panda Antivirus
Generic Suspicious, Trj/CI.A
71.43%

avast!
PUP-gen [PUP], Win32:PUP-gen [PUP]
57.14%

K7 AntiVirus
Trojan , Unwanted-Program , Adware
57.14%

NANO AntiVirus
Trojan.Nsis.Amonetize.dmftuw, Trojan.Win32.Amonetize.dmnxbx
57.14%

The domain downprov1.dynadownload.com has been seen to resolve to the following 2 IP addresses.

104.28.0.51
May 4, 2015

104.28.1.51
January 19, 2015

File downloads found at URLs served by downprov1.dynadownload.com.

3 / 68      (PUP)
http://downprov1.dynadownload.com/.../Cahier Technique Automobile Electricité Tome 1_10924_i11587364_il345.exe  (2cfce99525990ab39e14f2e78f686aeb)

22 / 68    (PUP)
http://downprov1.dynadownload.com/.../aglayan cocuk resmi_10924_i11754681_il345.exe  (b2d69159bdbdd30b970496426ce197ae)

23 / 68    (PUP)
http://downprov1.dynadownload.com/.../Windows Loader 2.2.1 By Daz_10924_i11620728_il345.exe  (e4348ae65ce6d4e9bbe1f1893218dd95)

5 / 68      (PUP)
http://downprov1.dynadownload.com/.../Gambar Memek Artis Indonesia_10924_i11746125_il345.exe  (f9adc5495fa71a333b5dff14a311efb9)

18 / 68    (PUP)
http://downprov1.dynadownload.com/.../Roxio Creator 2010 PRO Keygen_10924_i11613434_il345.exe  (roxio creator 2010 pro keygen_10924_i11613427_il345.exe)

19 / 68    (PUP)
http://downprov1.dynadownload.com/.../the green mile avi_10924_i11623725_il345.exe  (1b883bf9939d8e9ee5bb6722326cd42a)

18 / 68    (PUP)
http://downprov1.dynadownload.com/.../Roxio Creator 2010 PRO Keygen_10924_i11613427_il345.exe  (9665fbf1e70ce00b4a3fe391de6752f5)

14 / 68    (PUP)
http://downprov1.dynadownload.com/.../ocr software with crack_10924_i11728667_il345.exe  (2ae4e1264535b7b333449958f60cf145)

URL:
http://downprov1.dynadownload.com/

SSL certificate subject:
CN=sni21209.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx (PHP/5.4.37)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.