home

files4.downloadserver522.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
downloadserver522.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Tightrope.PourOverDigital.Bundler (M)
100.00%

The domain files4.downloadserver522.com has been seen to resolve to the following 2 IP addresses.

23.15.7.105
a23-15-7-105.deploy.static.akamaitechnologies.com
April 10, 2016

23.15.7.97
a23-15-7-97.deploy.static.akamaitechnologies.com
April 10, 2016

File downloads found at URLs served by files4.downloadserver522.com.

1 / 68      (Adware)
http://files4.downloadserver522.com/download/.../dl?bc=1181793&pid=adknowledge&brand=adknowledge.com&aid=adk&s=informer_fwint_dnld300x250usdisplay&c=informer_fwint&country=IN&variation=chwebsite&cb=1377710487&filename=Setup.exe&productKey=7yynpfmuwlrl55bwpkjl2ebq5kgvzpcv&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1  (0f8d7ed8f996c4fe0e5edffe3ea13ea5)

The following 13 files have been seen to comunicate with files4.downloadserver522.com in live environments.

TCP » 23.15.7.97:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 23.15.7.105:80
whatsapptime.exe

TCP » 23.15.7.97:80
browser.exe (Browser)

TCP » 23.15.7.105:80
browser.exe (Browser)

TCP » 23.15.7.105:80
horizon-setup.exe

TCP » 23.15.7.105:80
fgilpbkdnffpkoagpgppmmkifklahhab.crx

TCP » 23.15.7.105:80
bkaboldnohpcphmjfaoajaocfmbcdefd.crx

TCP » 23.15.7.105:80
ngbmnkfdajmegijnmgpclinofpkpfncf.crx

TCP » 23.15.7.105:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.15.7.97:443
liebao.exe (by Kingsoft)

TCP » 23.15.7.97:80
comcastantispyservice.exe

TCP » 23.15.7.97:80
onheklgeghhphlhgpbfpgmlpjinjoida.crx

TCP » 23.15.7.97:80
aaokmnpaoippoclepikifeegeknpopea.crx

TCP » 23.15.7.97:80
adhpiademcfnoaninfbhahnilgnpoeaa.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.