upd.files-download-23.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain upd.files-download-23.com is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in West McLean, Virginia within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Tuesday, October 14, 2014

Expires date:
Friday, October 14, 2016

Updated date:
Thursday, September 3, 2015

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MGSoftware.g, PUP.MaxigetLimited.K, PUP.MaxigetLimited.J, PUP.Luftix (M), PUP.New IT Limited.Maxiget (M), PUP.New IT Limited.MaxigetS (M), PUP.New IT Limited.Maxiget.Bundler (M), PUP.New IT Limited.MGSoftwa.Bundler (M), PUP (M)
100.00%

McAfee
Program.4shared
9.38%

VIPRE Antivirus
Threat.4150696
9.38%

Dr.Web
Trojan.DownLoader11.50017, Adware.Downware.9045
9.38%

Kaspersky
Trojan.Win32.Badur, not-a-virus:AdWare.Win32.Agent
9.38%

ESET NOD32
Win32/4Shared.AC potentially unwanted application, Win32/4Shared.Z potentially unwanted application
9.38%

NANO AntiVirus
Trojan.Win32.Badur.djxstg, Riskware.Win32.ArchSMS.dipmvj
9.38%

Agnitum Outpost
PUA.4Shared
9.38%

Avira AntiVirus
TR/Agent.41392, APPL/Downloader.Gen8
9.38%

G Data
Trojan.Generic.12297231, Win32.Application.4Shared, Gen:Variant.Symmi.49456
9.38%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, AdWare.Agent
9.38%

Panda Antivirus
Trj/Genetic.gen
9.38%

Emsisoft Anti-Malware
Trojan.Generic.12297231, Gen:Variant.Symmi.49456
6.25%

Lavasoft Ad-Aware
Trojan.Generic.12297231, Gen:Variant.Symmi.49456
6.25%

F-Secure
Trojan.Generic.12297231, Gen:Variant.Symmi.49456
6.25%

The domain upd.files-download-23.com has been seen to resolve to the following 2 IP addresses.

January 3, 2015

January 3, 2015

File downloads found at URLs served by upd.files-download-23.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../GTAIV.exe  (9508f4fa17a1032d3eb6ab412ef00812)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../SaveAs.exe  (a87bae5cce21548d5b8a962323c62821)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../TM.LD720-MyEgy.exe  (655ff988b6c9f5765adfb7d5ea7a693e)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../Actions_Pack_30.exe  (6c4bc58da60058930ffdc2d7b40523eb)

1 / 68      (Adware)
https://upd.files-download-23.com/.../Actions_Pack_16.exe  (87c1ea7434b21177e928c7e81fd84b77)

1 / 68      (Adware)
https://upd.files-download-23.com/.../MyGirl-031.exe  (b4b7a1f8d8d7fe4a108a9a6d27e0dbe6)

1 / 68      (Adware)
https://upd.files-download-23.com/.../Rizyn_VV.exe  (90ef7117a19442c4cd62a8d3bc0dca74)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../ipadfoto.exe  (747741daa0188b36db9db270d32c5d06)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../Update V2.exe  (39de61ed6caffd08bd6f0d82a794cd89)

1 / 68      (Adware)

1 / 68      (Adware)
https://upd.files-download-23.com/.../ASW982-TM2.exe  (dbb925958cd73a5c6c88cf6627572cf1)

1 / 68      (Adware)
https://upd.files-download-23.com/.../Teez.exe  (2f737dc5874269dec8e8056b9088cfaf)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

24 / 68    (Adware)
https://upd.files-download-23.com/.../Kochi_192.exe  (1f2e9a69da0ef7d3c47ccb9a450dcc2b)

18 / 68    (Adware)
https://upd.files-download-23.com/.../m2kmod_3.1.2.exe  (2f57bd8ff36140b439c69fe64ff1a811)

19 / 68    (Adware)