» downprov5.downloadfasteasy.com
Overview
Analysis
IPs Addresses (2)
Downloads (26)
Website Detail

downprov5.downloadfasteasy.com

Whois Privacy Corp.

Domain Information

The domain downprov5.downloadfasteasy.com registered by Whois Privacy Corp. was initially registered in November of 2014 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).

Registrant:

Whois Privacy Corp.

Registrar:

TLD REGISTRAR SOLUTIONS LTD

Server location:

Arizona, United States (US)

Create date:

Monday, November 10, 2014

Expires date:

Thursday, November 10, 2016

Updated date:

Wednesday, November 4, 2015

ASN:

AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:

downloadfasteasy.com

Whois:

2 downloadfasteasy.com records

Scanner detections:

Detections (92% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Ukra2006.t, PUP.Ukra2006.y, PUP.Ukra2006.r, PUP.Ukra2006.?, PUP.Ukra2006.v, PUP.Ukra2006.n, PUP.Amonetize.Bundler, PUP.Amonetize.Ukra2006.Bundler (M), PUP.Amonetize (M)

96.00%

Dr.Web

Trojan.Amonetize.12, Trojan.Amonetize.2263

32.00%

Sophos

Amonetize, PUA 'Amonetize'

32.00%

G Data

NSIS.Application.Crypted

32.00%

AVG

nbsp;

32.00%

VIPRE Antivirus

Threat.4150696, Trojan.Win32.Generic

28.00%

K7 AntiVirus

Unwanted-Program

28.00%

Avira AntiVirus

Adware/Amonetize.kpa

28.00%

Kaspersky

not-a-virus:AdWare.NSIS.Agent, not-a-virus:AdWare.Win32.Amonetize

24.00%

Qihoo 360 Security

HEUR/QVM42.0.Malware.Gen, Win32/Virus.Adware.b9e

20.00%

McAfee

Artemis!74DDEC1094BF, Trojan.Artemis!D1B754ECC797, Trojan.Artemis!00F7F0DF1AF8, Artemis!A8C7BEA5DDD8

16.00%

Clam AntiVirus

Win.Adware.Amonetize-511

16.00%

ESET NOD32

Win32/Amonetize.CE, Win32/Amonetize.CG potentially unwanted

12.00%

ESET NOD32

Win32/Amonetize.CE potentially unwanted application, Win32/Amonetize.CG potentially unwanted application

8.00%

Baidu Antivirus

Adware.NSIS.Agent, PUA.Win32.Amonetize

8.00%

The domain downprov5.downloadfasteasy.com has been seen to resolve to the following 2 IP addresses.

104.28.7.125

November 29, 2014

104.28.6.125

November 29, 2014

File downloads found at URLs served by downprov5.downloadfasteasy.com.

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../ver peliculas online gratis cracks_10924_i3743114_il345.exe (e90c626616acb69174b8d7a52c2bb74d)

0 / 68

http://downprov5.downloadfasteasy.com/.../bandicoot crash torrent.zip_10924_i3968487_il345.exe (6c31f16c10f4919d9e3135297c0c8b70)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Reinkjet Wl 150g C Driver_10924_i3582375_il345.exe (7473273f252e102be388fa3fab515f20)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Mac.rar_10924_i3947627_il345.exe (dab55dee559232dbc01f6af5cde3d506)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Transmisja na zywo_10924_i3801833_il345.exe (transmisja na żywo_10924_i3801833_il345.exe)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Grammaire méthodique du français PDF FRENCH_10924_i3578637_il345.exe (2ecfb80303e52ff7a9d3ea528a671202)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Playboy Thailand Playboy Bunny Soccer Team 2014.zip_10924_i3658291_il345.exe (175f0791b8dd4d4e39905f7b0d95734b)

1 / 68 (inconclusive)

http://downprov5.downloadfasteasy.com/.../Playboy Mexico August 2014.zip_10924_i3661999_il345.exe (ecbef93f101edaf52d0d9e04388e9c23)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Over All.pdf_10924_i3918185_il345.exe (17641b34f73041b5c102d2937d88b4f6)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../rtl8139 810x family fast ethernet nic download_10924_i4135108_il345.exe (4c70a47c62ea05798d178a75209fd896)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../How To Train Your Dragon 2 2014 DVDRIP XVID AC3 ACAB_10924_i3641010_il345.exe (f8040ee7fabe8be0b6364a05ed4864f4)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../The Best Christmas Album In The World Ever ( Bonus Xmas Carols C_10924_i3838918_il345.exe (ae0e5a7f4c3e743de4de63eb433222e2)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../acca f6 study text_10924_i4205339_il345.exe (7d3554f30db0bc7fe69d3fb83021c61c)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../math word problems division with remainders_10924_i4224301_il345.exe (76d2c9c8af112b57b64130aa97f70f60)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../id21b15.MR.!.HERO.rar_10924_i3717901_il345.exe (7b001501ff6e7df4182ddf7284f0e6c5)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../jennifer connelly movies_10924_i3807773_il345.exe (3619d88c878c0096f3bbbdd26a1663aa)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../tomb of dracula torrent.zip_10924_i4221437_il345.exe (47e88c83827ca2ff71ce200a6883c463)

1 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../appalachian region canada natural resources_10924_i3841027_il345.exe (dbee1a2cc6eb86e7be586b177bce5249)

22 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Fall Out Boy Folie A Deux (2008)_10924_i3741591_il345.exe (fall out boy folie a deux _10924_i3741565_il345.exe)

8 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../xbox 360 jtag skins_10924_i4089564_il345.exe (0db0a6927aae580f9936db97d5ff34db)

12 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../FilmEy.cOm.HDD.essential.rar_10924_i3775808_il345.exe (00f7f0df1af859cae500008435b74ec4)

11 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../iCorrect OneClick v2.0 plugin for_10924_i3640667_il345.exe (15f2883d5cc8bfac3febd877a34e83e7)

11 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Felidae German Audio, English Hard Subs DVD Quality_10924_i3715152_il345.exe ({blocked}.exe)

8 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../la vache qui rit mp3 gratuit_10924_i4194690_il345.exe (d1b754ecc79724608476af59684a1147)

11 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../creative visualization workbook pdf_10924_i4108339_il345.exe (90720b3b0e9da4712b833a708af0c010)

14 / 68 (Adware)

http://downprov5.downloadfasteasy.com/.../Microsoft Office Pro Plus 2014_10924_i3609444_il345.exe (74ddec1094bf977fbbd7afcfd3ff5775)

URL:

http://downprov5.downloadfasteasy.com/

SSL certificate subject:

CN=sni21116.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.