» files4.downloadnet1220.com
Overview
Analysis
IPs Addresses (64)
Downloads (113)
Network (488)

files4.downloadnet1220.com

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain files4.downloadnet1220.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.

Registrant:

Domains By Proxy, LLC

Registrar:

GODADDY.COM, LLC

Server location:

Massachusetts, United States (US)

Create date:

Wednesday, July 29, 2015

Expires date:

Friday, July 29, 2016

Updated date:

Wednesday, July 29, 2015

Root domain:

downloadnet1220.com

Whois:

1 downloadnet1220.com record

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Vitallia.LeftClickMedia.Installer (M), PUP.DownloadAdmin.RedLightMedia.Installer (M), PUP.DownloadAdmin (M), PUP.DownloadAdmin.RazorEdgeMedia.Installer (M), PUP.DownloadAdmin.RazorEdg.Installer (M), PUP.DownloadAdmin.SafeInst.Installer (M), PUP.DownloadAdmin.RedLight.Installer (M), PUP.TomorrowSoftware.SpiralMe.Bundler (M)

97.78%

ESET NOD32

Win32/DownloadAdmin.R potentially unwanted application, Win32/DownloadAdmin.Q potentially unwanted application

4.44%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

2.22%

F-Secure

Application:W32/Generic.70053c248f!Online

2.22%

avast!

Win32:Trojan-gen

2.22%

Dr.Web

Trojan.Vittalia.8190

2.22%

MicroWorld eScan

Gen:Variant.Razy.12439

2.22%

ESET NOD32

Win32/DownloadAdmin.Q potentially unwanted (variant)

2.22%

Bitdefender

Gen:Variant.Razy.12439

2.22%

AegisLab AV Signature

Variant.Application.Bundler.DownloadAdmin

2.22%

Lavasoft Ad-Aware

Gen:Variant.Razy.12439

2.22%

F-Secure

Gen:Variant.Razy.12439

2.22%

Emsisoft Anti-Malware

Gen:Variant.Razy.12439

2.22%

Arcabit

Trojan.Razy.D3097

2.22%

G Data

Gen:Variant.Razy.12439

2.22%

The domain files4.downloadnet1220.com has been seen to resolve to the following 64 IP addresses.

23.219.88.158

a23-219-88-158.deploy.static.akamaitechnologies.com

August 30, 2016

23.219.88.159

a23-219-88-159.deploy.static.akamaitechnologies.com

August 30, 2016

104.96.220.234

a104-96-220-234.deploy.static.akamaitechnologies.com

August 10, 2016

104.96.220.227

a104-96-220-227.deploy.static.akamaitechnologies.com

August 10, 2016

104.96.220.202

a104-96-220-202.deploy.static.akamaitechnologies.com

August 10, 2016

23.62.7.43

a23-62-7-43.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.34

a23-62-7-34.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.33

a23-62-7-33.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.26

a23-62-7-26.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.9

a23-62-7-9.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.65

a23-62-7-65.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.56

a23-62-7-56.deploy.static.akamaitechnologies.com

July 29, 2016

23.62.7.50

a23-62-7-50.deploy.static.akamaitechnologies.com

July 29, 2016

104.96.220.209

a104-96-220-209.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.248

a104-96-220-248.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.241

a104-96-220-241.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.219

a104-96-220-219.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.210

a104-96-220-210.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.216

a104-96-220-216.deploy.static.akamaitechnologies.com

May 26, 2016

104.96.220.226

a104-96-220-226.deploy.static.akamaitechnologies.com

May 26, 2016

104.96.220.233

a104-96-220-233.deploy.static.akamaitechnologies.com

May 18, 2016

104.112.235.19

a104-112-235-19.deploy.static.akamaitechnologies.com

May 18, 2016

104.96.221.98

a104-96-221-98.deploy.static.akamaitechnologies.com

May 16, 2016

104.96.221.91

a104-96-221-91.deploy.static.akamaitechnologies.com

May 16, 2016

April 11, 2016

April 11, 2016

April 11, 2016

April 11, 2016

April 11, 2016

April 11, 2016

Showing 30 of 64 IP Addresses

File downloads found at URLs served by files4.downloadnet1220.com.

1 / 68 (Adware)

http://files4.downloadnet1220.com/download/.../dl?bc=1190981&pid=mcdl&brand=mcdl.com&aid=TEST&c=organic&country=ID&variation=nochrome&cb=-470506739&filename=minecraft_3229.exe&productKey=e3qa7d6cw4cs6baet7drari6pfmjfu66&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1&executable=1197171 (1ba29cd2f5ea0b70fe8fdd3fef2d9c6d)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=39366353&filename=minecraft_166.exe&cb=-1063285609&executable=1197357 (57ac4b8ca2765f1e151cd722d39079ad)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=39374447&filename=minecraft_5689.exe&cb=743324472&executable=1197357 (0d9c9324e8790c8221f9971a19c19c08)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=38263367&filename=minecraft_52034.exe&cb=-1664610178&executable=1197357 (ab6a9f458bad062a3d5a1afdd8760ac9)

2 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=28580043&filename=minecraft_30073.exe&cb=1736815166&usefilename=true&executableroutePath1199715&stub=true (kodi-setup-43980209.exe)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=38922963&filename=minecraft_54279.exe&cb=1078309647&executable=1197357 (12494346807d05d381c35d768bc41b50)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=43899163&filename=minecraft_7844.exe&cb=-2101691344&executable=1197357 (4395b03ad30b1109a8f16238ed804fd8)

1 / 68 (Adware)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=28087153&filename=minecraft_9884.exe&cb=-575077207&executable=1198105 (81e499c4209ffdd576b9106297703a22)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=41995343&filename=minecraft_10843.exe&cb=1947190621&executable=1197357 (abf9cc24c61d7589654737b5da7dd22e)

2 / 68 (false positives)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=34556127&filename=minecraft_1779.exe&cb=-1198599457&executable=1197357 (wrar420.exe)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=46018605&filename=minecraft_25868.exe&cb=-328904575&executable=1197357 (3885be4964527e8301db1a494dfe5558)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=47770287&filename=minecraft_2621.exe&cb=-1664817739&executable=1197357 (5e92f6d70e3dc8ecf4b463fe1f31740b)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1201237/.../?bc=1201237&checksum=72219431&filename=minecraft_3405.exe&cb=1589229912&executable=1197357 (81fa4b6725d6edb8576672f019949c00)

1 / 68 (Adware)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=353419&filename=minecraft_33333.exe&cb=-1642411424 (5415fff46d34d4579cd641b0692dfb56)

1 / 68 (Adware)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=300163&filename=minecraft_9864.exe&cb=114782260 (4ed956800be0cdbea02ad93b98d9d9a0)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=63262831&filename=minecraft_96.exe&cb=-913232676&executable=1197357 (2857299679c1895c7a6fc3c7124424f6)

1 / 68 (Adware)

http://files4.downloadnet1220.com/download/.../dl?bc=1190981&pid=mcdl&brand=mcdl.com&aid=TEST&c=organic&country=KZ&variation=nochrome&cb=2106743099&filename=minecraft_2429.exe&productKey=wo64uj6oeq7jsxfevjr44sw7sxrm26w3&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1&executable=1197171 (350f963652661162524e69934a6a40dd)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=55656551&filename=minecraft_51568.exe&cb=-984129619&executable=1197357 (6facb084dbe211da9a31cea4bbec9d1f)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=55661221&filename=minecraft_50872.exe&cb=-673007211&executable=1197357 (b7992da836f67cbb8f3e6e199f20333f)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=45640993&filename=minecraft_52141.exe&cb=-50709369&executable=1197357 (77a89676980148033020b0d0d8647ff4)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=39191883&filename=minecraft_3279.exe&cb=46201267&executable=1197357 (a746a1c3c8cfe023be2e489a4add666b)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=43502335&filename=minecraft_51190.exe&cb=-2108056336&executable=1197357 (ef15254138459fc15f543258d509651d)

1 / 68 (Adware)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=10562973&filename=minecraft_30073.exe&cb=-1365000844&executable=1198105 (949640ff19e0ef83535a5b7b34a972af)

12 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1201237/.../?bc=1201237&checksum=65601399&filename=minecraft_30073.exe&cb=1240911393&usefilename=true&executable=1200659 (kodi-setup-54173039.exe)

12 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1201237/.../?bc=1201237&checksum=76795305&filename=minecraft_30875.exe&cb=-1681648706&usefilename=true&executable=1200659 (kodi-setup-54173039.exe)

2 / 68 (false positives)

http://files4.downloadnet1220.com/dl-pure/.../?bc=1190981&checksum=38708189&filename=minecraft_52009.exe&cb=716975499&executable=1197357 (wrar420.exe)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=37973221&filename=minecraft_1231.exe&cb=-109666120&executable=1197357 (cdb5f9fd34129ab1762cd6b6bc6bcd56)

2 / 68 (false positives)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=62973869&filename=minecraft_48882.exe&cb=-1176497072&executable=1197357 (wrar420.exe)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=42592383&filename=minecraft_44518.exe&cb=-1955392954&executable=1197357 (6e622cbdc30e619340a1816cb7910ef5)

1 / 68 (PUP)

http://files4.downloadnet1220.com/dl-pure/1190981/.../?bc=1190981&checksum=54139807&filename=minecraft_47328.exe&cb=-1963898122&executable=1200687 (4ba94cbbe4d51fd2ab418a9646023716)

Latest 30 of 113 download URLs

The following 488 files have been seen to comunicate with files4.downloadnet1220.com in live environments.

TCP » 104.112.235.19:80

TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.51.126.88:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:443

kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.90:443

kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.83:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.88:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.91:80

plugin.exe

TCP » 184.51.126.83:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.56:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443

messengertime.exe

TCP » 184.51.126.91:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.91:443

whatsapptime.exe

TCP » 184.51.126.91:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.219.88.158:80

browser.exe (Browser)

TCP » 23.15.7.97:80

browserairexec.exe (BrowserAir by Goobzo)

Latest 20 of 568 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.