home

lp.downloads-videos-free.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain lp.downloads-videos-free.com is registered by proxy through GODADDY.COM, LLC and was originally registered in June of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the nLayer Communications Internal/Backbone network.
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Tuesday, June 3, 2014

Expires date:
Friday, June 3, 2016

Updated date:
Thursday, June 4, 2015

ASN:
AS4436 AS-GTT-4436 - nLayer Communications, Inc.,US

Root domain:
downloads-videos-free.com

Whois:
2 downloads-videos-free.com records

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundlore.Bundler (M), PUP.Yontoo.InstallV.Installer (M), PUP.Tightrope.PourOver.Bundler (M), PUP.Softpulse.VolvanPr.Installer (M), PUP.Softpulse.YumonSys.Bundler (M), PUP.Yontoo (M), PUP.Bundlore (M), PUP.Air Software (M), Threat.Win.Reputation.IMP
100.00%

The domain lp.downloads-videos-free.com has been seen to resolve to the following 22 IP addresses.

208.73.211.70
April 8, 2016

141.8.224.239
July 23, 2015

23.67.250.122
a23-67-250-122.deploy.static.akamaitechnologies.com
May 4, 2015

23.67.250.105
a23-67-250-105.deploy.static.akamaitechnologies.com
May 4, 2015

23.3.13.82
a23-3-13-82.deploy.static.akamaitechnologies.com
February 15, 2015

23.3.13.10
a23-3-13-10.deploy.static.akamaitechnologies.com
February 15, 2015

23.15.7.144
a23-15-7-144.deploy.static.akamaitechnologies.com
December 20, 2014

23.15.7.154
a23-15-7-154.deploy.static.akamaitechnologies.com
December 20, 2014

61.213.181.176
November 1, 2014

61.213.181.187
November 1, 2014

23.0.160.66
a23-0-160-66.deploy.static.akamaitechnologies.com
October 24, 2014

23.0.160.33
a23-0-160-33.deploy.static.akamaitechnologies.com
October 24, 2014

69.31.29.190
ip-69-31-29-190.gtt.net
October 9, 2014

69.31.29.134
ip-69-31-29-134.gtt.net
October 9, 2014

204.2.148.192
August 19, 2014

204.2.148.169
August 19, 2014

23.3.13.226
a23-3-13-226.deploy.static.akamaitechnologies.com
August 19, 2014

23.3.13.202
a23-3-13-202.deploy.static.akamaitechnologies.com
August 19, 2014

23.62.6.184
a23-62-6-184.deploy.static.akamaitechnologies.com
August 17, 2014

23.62.6.179
a23-62-6-179.deploy.static.akamaitechnologies.com
August 17, 2014

23.67.242.19
a23-67-242-19.deploy.static.akamaitechnologies.com
August 13, 2014

23.67.242.43
a23-67-242-43.deploy.static.akamaitechnologies.com
August 13, 2014

File downloads found at URLs served by lp.downloads-videos-free.com.

1 / 68      (Adware)
http://lp.downloads-videos-free.com/.../setup.exe  (40c1f94fa745e2c9b32f8b553311772e)

1 / 68      (Adware)
http://lp.downloads-videos-free.com/download/.../?software=MediaDownloader&name=Setup.exe&no_cache=d10016bc78759b84378dd8d351bb6c4449b5696a4ee8cf  (ace19236cd2a796527ec383a348f7ca3)

1 / 68      (Adware)
http://lp.downloads-videos-free.com/download/.../?software=MediaDownloader&name=Setup.exe&no_cache=b3f7caba6020cba6a2771d80a95d6571f674891b618deb  (68dfc54b4fb49a95bfc223fb0097002d)

The following 143 files have been seen to comunicate with lp.downloads-videos-free.com in live environments.

TCP » 23.15.7.154:80
browser.exe (speed browser by Smart Applications)

TCP » 23.3.13.226:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.179:80
plugin.exe

TCP » 23.62.6.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.179:80
browser.exe (Browser)

TCP » 23.67.250.122:80
pi1vgjqw.exe

TCP » 23.3.13.226:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 141.8.224.239:80
dislike.crx

TCP » 141.8.224.239:443
droppad.crx

TCP » 208.73.211.70:80
videostream-elfana.crx

TCP » 208.73.211.70:443
droppad.crx

TCP » 208.73.211.70:443
droppad.crx

TCP » 23.0.160.33:80
cfpfanacdmfgfebimaccafhcjbdfdfol.crx

TCP » 23.0.160.33:80
ggndnhhibhgohfcikgcpjpiieipmlflj.crx

TCP » 23.0.160.33:80
cjonnlhapkkbplifnemglhgaaloplebm.crx

TCP » 23.0.160.33:80
fkmpjkomnpflaenmiccjmbkaapicalje.crx

TCP » 23.0.160.33:80
miabggnllnkbpmkeckmgcppnpebglfoc.crx

TCP » 23.0.160.33:80
miabggnllnkbpmkeckmgcppnpebglfoc.crx

TCP » 23.0.160.33:80
ibcpghbggehfodnapmcddffmnamgijhe.crx

TCP » 23.0.160.33:80
dlobpbmabmkhgddolngigpajaaeaccle.crx

 
Latest 20 of 149 files

URL:
http://lp.downloads-videos-free.com/

Title:
“downloads-videos-free.com”

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.