home

gfs.ezdownloadpro.info

Rafael Leviev

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Munich, Bayern within Germany which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Rafael Leviev who is located in Shfela, Israel.
Registrar:
1API GmbH

Server location:
Bayern, Germany (DE)

ASN:
AS61969 TEAMINTERNET-AS Team Internet AG,DE

Root domain:
ezdownloadpro.info

Whois:
2 ezdownloadpro.info records

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

McAfee
Program.MultiPlug-FWG
25.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.176907, Gen:Variant.Adware.Mikey.8516
25.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.176907, Gen:Variant.Adware.Mikey.8516
25.00%

ESET NOD32
Win32/Adware.MultiPlug.FC application, Win32/Adware.MultiPlug.FK application
25.00%

F-Secure
Gen:Variant.Adware.Graftor, Gen:Variant.Adware.Mikey
25.00%

Sophos
PUA 'MultiPlug' (of type Adware)
25.00%

MicroWorld eScan
Gen:Variant.Adware.Graftor.176907, Gen:Variant.Adware.Mikey.8516
25.00%

Malwarebytes
PUP.Optional.Unizeto
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

F-Prot
W32/MultiPlug.H.gen
25.00%

Bitdefender
Gen:Variant.Adware.Graftor.176907, Gen:Variant.Adware.Mikey.8516
25.00%

NANO AntiVirus
Riskware.Win32.MultiPlug.dooqpb, Riskware.Win32.MultiPlug.domoua
25.00%

Comodo Security
Application.Win32.AdWare.MultiPlug.VA
25.00%

Dr.Web
Trojan.DownLoader12.36250, Trojan.WebPick.5334
25.00%

The domain gfs.ezdownloadpro.info has been seen to resolve to the following 2 IP addresses.

185.53.177.6
June 25, 2016

185.53.177.10
February 25, 2016

File downloads found at URLs served by gfs.ezdownloadpro.info.

1 / 68      (Malware)
http://gfs.ezdownloadpro.info/hp/?q=S1s1Lj7NWYw3VcdefAZCrEeQ1nzmgKfh/T1tmMCiXCFPID EEbSCjlgEl qWhgG4A0FNOUYsFNCYTGOxOCebmz/E0yYlEQWsAzyBbXGidb9QjSbEdZxw7dtvjg2Jsg32rjv5k73DSsdaI0liM o58nhdCzYxTG2h2IwEwok/pDc uZ20clcWqfiuWVNwsu/NcLS3E6GDUnX NFaiLEftPvWyXOow WI7qxDoOnl udZnZRHKYA I9lZjG8EzXPMnLHGfxecQ7Ss7//6AyUlmPATG2YiNBZHZB/k47KSwAOPBc3OCrsm92NwvtaeSB4rep3hPAZlgPMrW6EnTiGP8 R46oXmWWm PHtrLNHLGd8Z7IuV1uO7ErvGhNPh95D1N7GMnFRZYmKRp4KT22f9jpRdITyp28Su5EJZdlYFx9NphmKe iw86FF SJVuxPbMND8hBRoJ5MQvJZv3sBCXsVgNHzg3/LcVAJHpyPudlmdP0LQNanNLsUv9tPqIqMFyuP0Fzlf/kjAXVgXDPu5gkwDiNcpcI4BBd3Wkegu3K7bYm6YRzSy4waMeEvqZPxU9nSBdCW8Ae7HZbvmQHzAzRX8LOPj9hKFUK2FQfLrrq8HglPP8UWzJ0JrIR7 ualUQCTuxFGMosQGvQ/.../FsivpCl9S8nj5KJ9YBFimXio8bqe1vmtWE3LLB3HAn&external_id=1424912528025053840&uuid=c7Uiu2g8IsNujzGU7XGDLRdyHsSTYxdr29sBhfS77zr2RE4zQxtfj4B3fojWAkackdt6gkiSZMMQQpeiI5A7lfvCGRzqbH10CZwOZnkuEBUHN14d9m4vxiJF42e0cHtMx5K6sZnMX80KwPlJuT1hlOvNlfPj2KzrIw10W8dvENhYDWhiHHpvxrKxW4jAF  (clash of clans.exe)

1 / 68      (Malware)
http://gfs.ezdownloadpro.info/hp/?q=9 VyuxWV UTuPomjlh5pSmdO2jrEzXLsM 0x j Zmv51ME7ynKaD/8ZCKVC2j3VLv1I8SaB3xU UiFIbBtbUysMQLyU KZEOt5kAhizE4Jxbk4ec a3T8Dzst1/ aZOSnvsycESCJkpUHGmsJRpx7MODTz62ko0PlnNE4W8y0ROQcVGSFX5ZdoIq0tmqi6wFcst0QpJSzDS/vA9UfdMCeL8xeHDfm3fiNcd0TKf9g1ciTDYz/qUdUKT/SLeOPnLlspK1n4Ql2bbRlNJk4IcO2 0fqVkq55L7De IRR2Z8/g TkE0RWZGib7fBstS1kxJld4acFvI4iYKbTLzZp3mKo16kZjz0OpRLLVS1NLyRyltBur3ISxiEQ8VUTqv/Bd4rKKSeTH4Yrukev6EpFU9EE8Gf57XlKMBKtJWTAXc0nPnuOsrqY0STDhRddpPElX1qaoTeTq7sXIy4W2EFhWcCMh9EDlWYAweGwZfRLALMiXdKDgFeFFYYG8L/sGeyXr07FO69tGtrIBfz2iYvo9LVyTGT8bOv9CqNKaI4XmrMNJgQASYCRAd4emBc89Hmhw4OdUX8dv1MD9UnKL3P ZZSjtR8uPAHnC/.../Ov5ux7Uz4102RS9PHuWjRkOrjc24KEcU0PLU0F3ZDhuXz DOC5t05C pDlyXrvf1z47fF&external_id=1424911982938730409&uuid=hwj9Mmgmx7WcpzIybFMBehzd4IBGLH2oFQFuq93CkViUWl4zKeBVWlun6oqXSBte1WXYSyCLtSIA0QiyS6V2S82JWjudQsucHAJ1z0QOreF5xOomJSA5sx17i43iMEJ4bTFhS20A0u6DrkJdy7kcKf3MHuxkARABGTG3LOtjvV5vmlvK9u1msi6KwDNjf  (clash of clans.exe)

1 / 68      (Malware)
http://gfs.ezdownloadpro.info/hp/?q=fWLnkDzkd079kg0123Cb6IBC6vCT9DUOZfeBo51DUdacwrLdu/Gr1mkyvBwuRnKOpO26SCz0/us89sNwIVFPSI4/xcwchRbz26kiBdDEZe1kNcqMlJFzelMXxE6OoOLxTkKU9QiE4j2Q8UmAqQvXO2tA7YL1HwBQaygEJbc9yXIAAdMe7Kr5uSw5Y1mK9MlRiIhVbr882Q7oxnLNEbS7HUlpqkGRfMtaXtXysuIC4jZCc0g2LpPQKCt2jHqqwP 2O89rYR3TGrmCdhF4mSGsPY4pzXLbKQ3L3As3dUBySegXx1HWPH62t0xM07GBJmn7k1aS1 Suvancv12ScNH/CSdo7nl1oEp6421HbKNiuKRYs5dIeBINDo9Xo5z3jCRkIHZxO7uTjqD8/.../PDAn8GbjDZtwOq3lKxx97o5Km01EB1lVZOBZNKbx6O1utafA&external_id=1424908175429273288&uuid=XvDx5HNECfucsCMDyTOMEgzGmV5WFjbfexZ32MGb5EHk4bT6GZmY3bxWjlU1tjYfOS1WzMfW8qzlTuiJikGtAEE9eAZnalASJ2gVHZovPXjABJ6Y7jbPKoM5abWf9JxgAQL7Z1nIZD7ICLEYLOlNiWEu7doP3QK1vUUwQ4xgtqm1UV3CyU2g9nWQTwIutBepRkJ19Rvw5gUgLiZHnj9s5qowlEJ6Wr1AwYYCT01lc0xJnCJTIBXZGVmT5ekpAqqSKFQ6EWDlmiuGe5PgUKr3Uq5eTrPeGeOPxRZqwAArcUCfitKDkHHXTSd5YQiYXFxtR7N9ENxVLtJ6IQ9xutKEcndjHAz70hw085lJzUAs12UUKn3HZS8EPxcrO07LigCNiarAakNAfZMbAMT9WuAtcQ2fK99k9DQdaFiCoClcb  (picsart.exe)

1 / 68      (Malware)
http://gfs.ezdownloadpro.info/hp/?q=fWLnkDzkd079kg0123Cb6IBC6vCT9DUOZfeBo51DUdacwrLdu/Gr1mkyvBwuRnKOpO26SCz0/us89sNwIVFPSI4/xcwchRbz26kiBdDEZe1kNcqMlJFzelMXxE6OoOLxTkKU9QiE4j2Q8UmAqQvXO2tA7YL1HwBQaygEJbc9yXIAAdMe7Kr5uSw5Y1mK9MlRiIhVbr882Q7oxnLNEbS7HUlpqkGRfMtaXtXysuIC4jZCc0g2LpPQKCt2jHqqwP 2O89rYR3TGrmCdhF4mSGsPY4pzXLbKQ3L3As3dUBySegXx1HWPH62t0xM07GBJmn7k1aS1 Suvancv12ScNH/CSdo7nl1oEp6421HbKNiuKRYs5dIeBINDo9Xo5z3jCRkIHZxO7uTjqD8/.../PDAn8GbjDZtwOq3lKxx97o5Km01EB1lVZOBZNKbx6O1utafA&external_id=1424908175429273288&uuid=Nx6bsEFy5z1lYIbaBQ6QejbkdA0BYaWnZW38aA8IA4OPrURyETItGPX3hrNiAMPcDfml0D3VNkEeAWfYayiBWtwZYW3z53XMeblo9jnXp0rOTyXBdHA33IdelDfmrH1cGAxi6kSmx6BshaayY2FqCKDklHvCT3iD2mnllRoboHEXaVRYglyloKQbyH4Uv5faGUAw4IIdO7R3vJUD4BHdYvVzn1yBlVKZHjfq3YK9BpGxsfydql12npwxPKX8sz5EJPIlyLqvmchzJcNufa8fkeV0wBCNnETn9QMnKPrv8VYuqHMKwqbUzX5DX7ZKXmz3cZyiqXIu9lEFNdPx7T9cwUtKsLgFrI19uMDpZCdQ7cU4J1O89VoUpGEoPgAg0sXwb9jgnacImP3FWkvSZn6sUOLQENDGSQAdtDEREyqd8  (picsart.exe)

1 / 68      (Malware)
http://gfs.ezdownloadpro.info/hp/?q=dLbWSec7AxTBqomjlh5qge91f36PQZ3goN8cbO7628HX1e4CRW5GRmmsvJXW8TnQlQjVPN56kDJMU6TbHKVNa/045Cw5zo805khOrUmX5ljCPohJglGuap9gJ/rVXH1L7KYh9de9J6UvTopqRBNh4mcOlqUvBt4IHCtvbCXHKdq5hsP5ujb2fD/2HlAkGkWAdUbftAoIa7UQvCB81YgmV7KbyZ EcaXGV7VaiW8d3D2nyLUo92LM06aX3Uhw2FfEDUoJ0FNdkHLa7lI/yWqS2J w Iea9mjmRVntBEsa3AbiyQIN6IdOF1B0mcsdBpDj6o81YdJGdThM84CmrtoKTOgGzQB7POgiR2jbyMsYVQXGV7VgOG7lNI2njIeF9AiK57 VEMSuCTtDrIbKvf4DM2xK1jbfgcjaEEVGqvFCA/7FO9cI9edNt/OxxJRcPqs/LFp9F9GjYJR4PRguZNKkCRtDxVEVW8 /CR5QTqgX4aPBrzOd9OrlFWab8B53snnWxnupgb8mJHObA0PSqtQBG9Zi4H/5JMfm3L1FFyKx9husuZVh3MojSB88thgxSTyVzAwCnBShNFI57ZzyFlr CTn sFBOaZ88syqLDxSEcSjOaQ43R8OIJzxIgP9tZBaPUBy61At2EyGQp8g3ul1ktUOhGIwGis HP7ZC0J1J6yWVnOzBFDlT0YlQnCtjkKR5alP2K7Pdv3N2Bp JwpLiw zpvdlbOWzOTSShzOqBgag 5Wom0EpFQdnK2t3dr/ztFJrkwVYC7qOZxIKY0O4NgmBgOi5UAFYKlqiVxWkynG XlMON2Jyb0NHq/.../9w&external_id=1424913352666321223&uuid=YCJR9YwlneXQyNnoIbt4j9UVonHHGVscGERUSLpO6JMrOgBFJ7xqfurBh3MFnSheliP3Y  (national velvet 1945.mov.exe)

1 / 68      (Malware)
http://gfs.ezdownloadpro.info/hp/?q=moJpi5eBNkq7J34567S/oVMZDS/uOrwyPc073nA4t0FsO3ISPVMQmUGoznDoD/Zg2y8nIeBWUIlQjpoS0VoXgicUTd1JsXutS/A9oykPewHljCoTJwt2/I2SPz4uGpWM4HEMadHQN0qdpXqcr8JQjcs36Ku4oFbXZ iaZ9rVbSCKO8NulXqi8kof59aIuYQRsYjvA4LeThxFGKzBx3XyS8PQCkjpTtyfgtRHQNxtF56OQFSQJBtQfmQj8iGQ9lB8zcdkB3Xx3IJyV8 bvpnoIO0/FfkUmPPCKBYsufk66eUxEz7mnHGL1VxxxYhCPHxkub7gG 04z4HTiyhmuSbmFXTBP Fu1ebpv7Y7fbb5 uFdY29pIrE5713vJQV0Zt7fS0HKd9IwdWU/clNYtmxpxOMxPYd4cP9WhRhOauMFhbox3rmDGddPg2JA8uuc0gW1ryzagr/GnLqiYDfD7sc43V3pB6JJkI x k6Fr1A5Jatz KEz2jSRLn zsxCpAK5cBkSu1nJSo2CstVl/UM 8fTHoDi8nVXhOYdIL1j76s19iG/FEDH2A9muyeSePdprtFadaPLSIm7ZsA/AZT5t19VTsJIAH5l/4oLEcsd5y6Ve1wNZGWcmrQ2NZqQc2mHoctMCxraW qqPlTk wk8SRqLez5AnGbSEB8FN3ZW072LUMgYUHaQBkUr7D1dnH6DNwXEySMYGt1HWcaUcSZ /zmt5rd5/eLzgkBmhzTeyQJ9kV10YxUDr7I0ARLB0lPQCmKzUYlOw9ua4Ml4MgJDJZtePtRVyoOog/ruiQlPm88/yr4nNXbA4kWUBPLktOOS9 lqu93 D5/.../BAU1RyaPaEjtB e0DoZpUlT5ExjxRziZJh  (sm64 ds music-main theme(bob-omb battlefield).mp3.exe)

23 / 68    (PUP)
http://gfs.ezdownloadpro.info/hp/?q=he/L5f6/qnekENPRJLtbcxcJqM6J5cIzcqDuwxpeHtY3DRav2mkrnn95/e z3z/FsvlWXHaJmf3wyd8hZv627nSeTYIQjaiFccOXq23AdI/xWEEOo7Y5llPjCuU4IVt9S XgRXWhAOhsc8 FJlR5FZE0kGfYL0or h4yvJyLzE0yapC3/On8gT1LBo88JoeC7cGQddvzWmEkdhqfEXb5z4SIr8isNHHEOpxOegmsYbDiEK6JAvArmQbDAeuYoZjY7OvO0ghLA0weXFfpKZJX4Ecc6JFSV iKt10sotBiuucqXUn9aZ/.../5nd7i8yZ6ScxVI9IRuNZlqKr0GWP7fcWFqTVp4CoRp32c95YwI1xfdkXHTRJ7iQkPtWAotZS4CPGdqTdTwrecJAu2IXdzeSNrAnsomznbf2fzrzlbLVfEegsHVu6I hYj7 mux6L2 QOGkaKTFN7EFDEhbQGChe3em0Sa7u&external_id=1424927150192871284&uuid=zjvCuQOGEA8VE2wj6vEgbcEcEqard1tql5VvCHQeyorHi3m1IN8lqC6EJCylWaV6X7r4LZt5IEJIwYM0mDOaguKO36mVtyjNJ9PC77l8TLVP0WLlvgHl9IT0hPOVaBPbhC4ZOB1feGLFw7CGJW7zrVCSA7kQMYms5byTOLXxtpkzplyeYJvaDoW8HHndMfpmJ2SgRUjMyL16IVkhxAwt9opB4UIO12PtWS4KTtlxI4fRSmVHA5In0tRtE3IC0zMJKsBW4epXUxRlEeJQRDnPi7d9VAou3wn0lKvnkgvWWIZCDYXTDeQYPqwRWTE3S89lRfING2l0tYDNYK1dc0qomnxt8Hh2VAwRFbaXyI2uZqLBcWWWwObkNgyXlTV4xYgttjh34al0cWZNPhjeWRz9KGKBe9xAVAOyFodV6NBCzsNvABeXxMnSrnMhpcs3  (simcity.exe)

21 / 68    (PUP)
http://gfs.ezdownloadpro.info/hp/?q=q6wgRxYE6ajptabcde/msKa7s2FHkEgSjmPE9v4caAHd67TljRV2gxi1P1n2Z7S0oGU/N8WRj7EVCva/m UnHC6cgXzdHgwir/UM9sQG6jdaFiNYKlo8/j48M8qEy8J4ZCIwhMT1J3vH6JxbTLlKGSQbKoerxmeP3BUT9r16gX6NTNC1VycQe35S/O8XCNU LbdSrIbO/nMCnfxggFXGnw7/uzcQR7UaByTcsYr7AkZg0RZ0URAZpFTD4vfvvi23aICSLZFC8lNE6ru4cZEPHVI/hishScsEV43XyNpi8RvaStqM7itzGUtUu5K1RWgukZGgAYjWf6PccVmXFBvjuGQWMJ65wereRXqotwMWAK4MsTnIprGQsSPuPfDIj1GdCyUDFOSOCOUSSUmX7E2oTfW62ft/mFNiIcjftPfD4i6KEuS1gs/L2L/9xOB4HCA3u5qEZTwmVR6 5Lki1THYq/J4JiExFdacmmHOHzigbhpHkIhphz gZ8rFuh19CpgNmajDN8Tw5F7cT69l/32ekI5JVY3KnZrSxYzn5cvTBpcYsFOyWY9CanNHNl//r4SgnhlUaSEb54u2X8DrE2MoweEX M T4ic4pMyXjvwr4V3eTrJVEQHVdlbbRbejWSw4Vb8TnBMB4ByzY3FNdmBABQ6X3n5Iudbse3I2WocDuJ/DXnFQYhA3d1/4cADu wqLc0WEy QBsPkp4CwVVE c39n4RGAzfzslPARfMtk72FJaY3UrYy4yypKljzt1c3A2yzm91YtG/.../l6xrIH2k1SvgM0OD&external_id=1424911991511354788&uuid=E16ItdzjtTHx5dm4pfiqrh51jxtSxRNZSR3eL5vHfVHvWqAiAj5kY74wATA8PCXd3f92n37ob  (rowland s howard - pop crines 2009.rar.exe)

URL:
http://gfs.ezdownloadpro.info/

Title:
“ezdownloadpro.info”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.