home

server1.downloadnd.com

Conrad Walter

Domain Information

The domain server1.downloadnd.com registered by Conrad Walter was initially registered in February of 2014 through PSI-USA, INC. DBA DOMAIN ROBOT. The hosted servers are located in Koeln, Nordrhein-Westfalen within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
PSI-USA, INC. DBA DOMAIN ROBOT

Server location:
Nordrhein-Westfalen, Germany (DE)

Create date:
Monday, February 10, 2014

Expires date:
Friday, February 10, 2017

Updated date:
Thursday, February 11, 2016

ASN:
AS20773 HOSTEUROPE-AS Host Europe GmbH,DE

Root domain:
downloadnd.com

Whois:
1 downloadnd.com record

The domain server1.downloadnd.com has been seen to resolve to the following IP address.

178.77.105.125
vwp14566.webpack.hosteurope.de
February 19, 2016

File downloads found at URLs served by server1.downloadnd.com.

0 / 68
http://server1.downloadnd.com/files/.../artmoney.exe  (artmoney743eng.exe)

0 / 68
http://server1.downloadnd.com/.../teamviewer.exe  (teamviewer_setup_de-jfa.exe)

0 / 68
http://server1.downloadnd.com/.../gimp.exe  (gimp-2.8.14-setup-1.exe)

1 / 68
http://server1.downloadnd.com/.../dvdshrink.exe  (dvdshrink32setup.exe)

0 / 68
http://server1.downloadnd.com/.../malwarebytes.exe  (mbam-setup.exe)

0 / 68
http://server1.downloadnd.com/.../quicktime.exe  (QuickTimeInstaller.exe)

0 / 68
http://server1.downloadnd.com/.../realplayer.exe  (realtimes-realplayer1802_de.exe)

0 / 68
http://server1.downloadnd.com/.../steam.exe  (steamsetup.exe)

0 / 68
http://server1.downloadnd.com/.../notepadplus.exe  (npp.6.8.3.installer.exe)

1 / 68
http://server1.downloadnd.com/.../adwcleaner.exe  (adwcleaner_5.003.exe)

0 / 68
http://server1.downloadnd.com/.../spotify.exe  (spotify_installer-1.0.16.104.g3b776c9e-267.exe)

0 / 68
http://server1.downloadnd.com/.../audacity.exe  (audacity-win-2.1.1.exe)

0 / 68
http://server1.downloadnd.com/.../itunes.exe  (itunes6464setup.exe)

2 / 68      (Malware)
http://server1.downloadnd.com/.../minecraft.exe  (3c166bae84553d4cb27af8abdc61712d)

0 / 68
http://server1.downloadnd.com/.../GoogleEarth.exe  (googleearthwin.exe)

0 / 68
http://server1.downloadnd.com/.../java.exe  (jre-8u60-windows-x64.exe)

The following file have been seen to comunicate with server1.downloadnd.com in live environments.

TCP » 178.77.105.125:80
libreoffice_setup.exe (LibreOffice by Software Assistant)

URL:
http://server1.downloadnd.com/

Web server:
Apache

downloadlod.com

vlcplayer.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.