home

www.freeware.de.download-sponsor.de

Domain Information

Server location:
Bayern, Germany (DE)

ASN:
AS24940 HETZNER-AS Hetzner Online AG

Root domain:
download-sponsor.de

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Agnitum Outpost
Riskware.Agent
100.00%

Trend Micro House Call
HV_ZYX_CA22677F.TOMC
100.00%

Dr.Web
Adware.Downware.2252
100.00%

VIPRE Antivirus
DownloadSponsor
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

G Data
Win32.Application.DownloadSponsor
100.00%

Vba32 AntiVirus
Downware.VB.AndreClient
100.00%

ESET NOD32
Win32/DownloadSponsor (variant)
100.00%

The domain www.freeware.de.download-sponsor.de has been seen to resolve to the following 2 IP addresses.

46.4.173.131
www2.thinklabs-cluster.de
March 28, 2014

88.198.27.201
www1.thinklabs-cluster.de
March 28, 2014

File downloads found at URLs served by www.freeware.de.download-sponsor.de.

8 / 68      (PUP)
http://www.freeware.de.download-sponsor.de/?cid=h367240&lastchange=1327506831  (mein-hpl-2010-downloader.exe)

The following 8 files have been seen to comunicate with www.freeware.de.download-sponsor.de in live environments.

TCP » 88.198.27.201:80
ocs_v71a.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71a.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 46.4.173.131:80
CyberGhost.exe (CyberGhost VPN 5 by CyberGhost S.R.L)

TCP » 46.4.173.131:80
sysTPLService.exe (sysTPLService by Tlapia)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
sysTPLService.exe (sysTPLService by Tlapia)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

freeware.de

icq-tools.de

shareware.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.