home

www.requestdownload.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain www.requestdownload.com is registered by proxy through Moniker Online Services and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
Moniker Online Services

Server location:
Virginia, United States (US)

Create date:
Thursday, October 31, 2013

Expires date:
Saturday, October 31, 2015

Updated date:
Sunday, October 5, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
requestdownload.com

Whois:
3 requestdownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Avira AntiVirus
ADWARE/Adware.Gen2, Adware/Amonetize.tzv
100.00%

ESET NOD32
Win32/Amonetize.AA (variant), Win32/Amonetize (variant), Win32/Amonetize.AJ (variant), Win32/Amonetize.AO (variant), Win32/Amonetize.AS (variant)
100.00%

Reason Heuristics
PUP.Installer.ShetefSolutionsConsulting1998.w, PUP.Installer.ShetefSolutionsConsulting1998.h, PUP.Installer.ShetefSolutionsConsulting1998.?, PUP.Installer.ShetefSolutionsConsulting1998.s, PUP.Amonetize.Bundler (M)
93.75%

Malwarebytes
PUP.Optional.InstallMonetizer, PUP.Optional.Amonetize, PUP.Optional.Amonetize.A
93.75%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize
93.75%

Trend Micro House Call
TROJ_GEN.F47V1216, TROJ_GEN.F47V1211, TROJ_GEN.F47V1214, TROJ_GEN.F47V1215, TROJ_GEN.F47V0424, TROJ_GEN.F47V0427, TROJ_GEN.F47V0429
87.50%

VIPRE Antivirus
Amonetize, Trojan.Win32.Generic
87.50%

Dr.Web
Adware.Downware.1575, Adware.Downware.3033, Adware.Downware.3081, Adware.Downware.2467, Adware.Downware.3547
81.25%

McAfee
Artemis!DA55E3AC944E, Artemis!311F3AB701D4, Artemis!997B35320321, Artemis!D398895D0274, Artemis!74705E1F9812, Artemis!D5F74C41F572, Artemis!E1A28BF16135, Artemis!4D492568524B, Artemis!08566C143686, Adware-Amonetize!EC66BB610978
75.00%

avast!
Win32:Amonetize-E [PUP], Win32:Amonetize-AX [PUP], Win32:Amonetize-AM [PUP]
75.00%

Sophos
Amonetize
75.00%

Baidu Antivirus
Adware.Win32.Amonetize
68.75%

Qihoo 360 Security
HEUR/Malware.QVM01.Gen, Win32/Virus.Adware.932, Win32/Trojan.Multi.daf, Win32/Trojan.Adware.37e, Win32/Application.639
62.50%

K7 AntiVirus
Trojan , Riskware , Unwanted-Program
62.50%

MicroWorld eScan
Trojan.Generic.11265505, Trojan.Generic.11241702, Adware.Generic.939761, Trojan.Generic.11258040, Trojan.Generic.11301802, Gen:Variant.Application.Bundler.Amonetize.11
50.00%

The domain www.requestdownload.com has been seen to resolve to the following 9 IP addresses.

107.20.210.63
ec2-107-20-210-63.compute-1.amazonaws.com
May 30, 2014

50.17.206.16
ec2-50-17-206-16.compute-1.amazonaws.com
May 30, 2014

50.17.209.45
ec2-50-17-209-45.compute-1.amazonaws.com
May 30, 2014

23.21.228.251
ec2-23-21-228-251.compute-1.amazonaws.com
May 30, 2014

54.235.68.127
ec2-54-235-68-127.compute-1.amazonaws.com
April 11, 2014

107.21.115.114
ec2-107-21-115-114.compute-1.amazonaws.com
April 11, 2014

54.225.132.130
ec2-54-225-132-130.compute-1.amazonaws.com
March 14, 2014

23.23.96.46
ec2-23-23-96-46.compute-1.amazonaws.com
February 3, 2014

54.225.181.84
ec2-54-225-181-84.compute-1.amazonaws.com
February 3, 2014

File downloads found at URLs served by www.requestdownload.com.

28 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=2155&instid[appname]=SkyMonk&instid[appsetupurl]=http://update.skymonk.net/installers/s2setup_cupointavdownrib.exe&instid[cmdline]=-x"Deadhuntv101RUSsetupwwwsmallgamesinfoexe_2867628_78_letF"&instid[appimageurl]=http://update.skymonk.net/silent/logo.bmp&prefix=SkyMonkAM&instid[thankyoupage]=http://.../thanksForInstall.html  (indemsoft.oto.servis.takip.programı__2309_il1146370.exe)

14 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=2155&instid[appname]=SkyMonk&instid[appsetupurl]=http://update.skymonk.net/installers/s2setup_ribble.exe&instid[cmdline]=-x"InternetDownloadManager621lMaZiKa2daYCoMBYkhalidrar_18469093_98_letI"&instid[appimageurl]=http://update.skymonk.net/silent/logo.bmp&prefix=SkyMonkAM&instid[thankyoupage]=http://.../thanksForInstall.html  (setup.exe)

1 / 68      (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=2155&instid[appname]=SkyMonk&instid[appsetupurl]=http://update.skymonk.net/installers/s2setup_ribble.exe&instid[cmdline]=-x"id619b08ByMRHEROrar_88095665_10_letF"&instid[appimageurl]=http://update.skymonk.net/silent/logo.bmp&prefix=SkyMonkAM&instid[thankyoupage]=http://.../thanksForInstall.html  (setup.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3516&instid[appname]=apa riverpoint writer free_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=apa riverpoint writer free&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-14T22:57:03.549439 00:00&parameter=apa riverpoint writer free&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-14T22:57:03.549439 00:00&parameter=apa riverpoint writer free&ti1=1240000&ti2=0&ti3=2013-12-14T22:57:03.549439 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

18 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.90&campid=4040&instid[appname]=Flash Player Pro&instid[appsetupurl]=http://fpdownload.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_11_7_plugin.exe&instid[cmdline]=&instid[appimageurl]=http://i.imgur.com/wjf7gpK.png&prefix=FlashPlayerPro&instid[thankyoupage]=http://.../  (server cccam.rar__3038_i592067439_il3891856.exe)

9 / 68      (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.90&campid=4227&instid[appname]=Video Update&instid[appsetupurl]=https://s3.amazonaws.com/flawless_technology/software/ffdshow.exe&instid[cmdline]=/S&instid[appimageurl]=http://i.imgur.com/wjf7gpK.png&prefix=Setup&instid[thankyoupage]=http://support.officialdownloads.net  (idm.6055.silent.install.exe__3039_i594856322_il4301210.exe)

9 / 68      (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3039&instid[appname]=Angel.S02E01.DVDRip.DivX AMC.avi_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=Angel.S02E01.DVDRip.DivX AMC.avi&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=500000&ti2=0&ti3=2013-12-12T03:09:01.145482 00:00&parameter=Angel.S02E01.DVDRip.DivX AMC.avi&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=500000&ti2=0&ti3=2013-12-12T03:09:01.145482 00:00&parameter=Angel.S02E01.DVDRip.DivX AMC.avi&ti1=500000&ti2=0&ti3=2013-12-12T03:09:01.145482 00:00  (hentai anime__3516_i188183694_il9154614.exe)

38 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26&ti1=t290.37239-CU.0.100.427fbd59206&ti2=&campid=7817&instid[appname]=Download Manager&instid[appsetupurl]=http://link.wdownloadmanager.com/?url=&ref=t290.37239-CU.0.100.427fbd59206&name=DownloadFileSetup&source=xs&instid[cmdline]=&instid[appimageurl]=http://getdl.net/.../dl.png&prefix=Download.Setup&instid[thankyoupage]=  (ashampoo.anti.virus__2309_il321356.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3516&instid[appname]=The Vampire Diaries.510.dvdrip.xvid reward.av ..._Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=The Vampire Diaries.510.dvdrip.xvid reward.av ...&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1295000&ti2=0&ti3=2013-12-13T00:21:33.047571 00:00&parameter=The Vampire Diaries.510.dvdrip.xvid reward.av ...&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1295000&ti2=0&ti3=2013-12-13T00:21:33.047571 00:00&parameter=The Vampire Diaries.510.dvdrip.xvid reward.av ...&ti1=1295000&ti2=0&ti3=2013-12-13T00:21:33.047571 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

23 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26&ti1=t198.0.0.1.4277a0cc620&ti2=&campid=2299&instid[appname]=Download Manager&instid[appsetupurl]=http://link.wdownloadmanager.com/?url=name://god s generals 2 pdf&ref=t198.0.0.1.4277a0cc620&name=DownloadFileSetup&source=xs&instid[cmdline]=&instid[appimageurl]=http://getdl.net/.../dl.png&prefix=god.s.generals.2.pdf&instid[thankyoupage]=  (downloadfilesetup__2299_i606105755_il3141480.exe)

9 / 68      (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3516&instid[appname]=The Fifth Element 1997 1080p BrRip x264.mp4_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=The Fifth Element 1997 1080p BrRip x264.mp4&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=500000&ti2=0&ti3=2013-12-12T03:06:08.380828 00:00&parameter=The Fifth Element 1997 1080p BrRip x264.mp4&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=500000&ti2=0&ti3=2013-12-12T03:06:08.380828 00:00&parameter=The Fifth Element 1997 1080p BrRip x264.mp4&ti1=500000&ti2=0&ti3=2013-12-12T03:06:08.380828 00:00  (hentai anime__3516_i188183694_il9154614.exe)

38 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26  (ashampoo.anti.virus__2309_il321356.exe)

24 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=2155&instid[appname]=SkyMonk&instid[appsetupurl]=http://update.skymonk.net/installers/s2setup_ribble.exe&instid[cmdline]=-x"Multihackv19rar_12456323_91_letF"&instid[appimageurl]=http://update.skymonk.net/silent/logo.bmp&prefix=Multihackv19rar1245632391letF&instid[thankyoupage]=http://.../thanksForInstall.html  (clash of clans hack v3 5 downloader__3687_i624904529_il12339075.exe)

38 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26&ti1=t198.0.0.1.42640c80e15&ti2=&campid=2299&instid[appname]=Download Manager&instid[appsetupurl]=http://link.wdownloadmanager.com/?url=name://U2ltcGxlIFBpY2t1cCAtIFByb2plY3QgR28gd2Vla3MgMSAtIDk=&ref=t198.0.0.1.42640c80e15&name=DownloadFileSetup&source=xs&instid[cmdline]=&instid[appimageurl]=http://getdl.net/.../dl.png&prefix=U2ltcGxlIFBpY2t1cCAtIFByb2plY3QgR28gd2Vla3MgMSAtIDk.&instid[thankyoupage]=  (ashampoo.anti.virus__2309_il321356.exe)

10 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3515&instid[appname]=sony vegas pro 11 serial number and activation code free_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=sony vegas pro 11 serial number and activation code free&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-15T19:04:23.017093 00:00&parameter=sony vegas pro 11 serial number and activation code free&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-15T19:04:23.017093 00:00&parameter=sony vegas pro 11 serial number and activation code free&ti1=1240000&ti2=0&ti3=2013-12-15T19:04:23.017093 00:00  (omega a cualta mi gata__3515_i194220723_il10364354.exe)

9 / 68      (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3039&instid[appname]=Top.Secrets.S01E01.Presidential.Assassinations.HDTV.XviD AFG.avi.flv_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=Top.Secrets.S01E01.Presidential.Assassinations.HDTV.XviD AFG.avi.flv&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=500000&ti2=0&ti3=2013-12-12T03:46:36.916036 00:00&parameter=Top.Secrets.S01E01.Presidential.Assassinations.HDTV.XviD AFG.avi.flv&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=500000&ti2=0&ti3=2013-12-12T03:46:36.916036 00:00&parameter=Top.Secrets.S01E01.Presidential.Assassinations.HDTV.XviD AFG.avi.flv&ti1=500000&ti2=0&ti3=2013-12-12T03:46:36.916036 00:00  (hentai anime__3516_i188183694_il9154614.exe)

21 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=2309&instid[appname]=Active WebCam&prefix=Active.WebCam&instid[appsetupurl]=http://downloads.pysoft.com/AWC-PYS.exe&instid[appimageurl]=http://.../1gBZliu&instid[thankyoupage]=none&instid[interrupted]=none  (download.setup__7818_i606960162_il7628554.exe)

26 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.26&ti1=p191.res.0.result.4279942cd14&ti2=5959167726&campid=2299&instid[appname]=Download Manager&instid[appsetupurl]=http://link.wdownloadmanager.com/?url=&ref=p191.res.0.result.4279942cd14&name=DownloadFileSetup&source=xs&instid[cmdline]=&instid[appimageurl]=http://getdl.net/.../dl.png&prefix=DownloadSetup&instid[thankyoupage]=  (downloadsetup__2299_i604985453_il7080503.exe)

38 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=6040&instid[appname]=ThroneRushHack&instid[appsetupurl]=http://.../Bravehack.exe&instid[cmdline]=/s&instid[appimageurl]=http://.../thankyou.png&prefix=ThroneRushHack&instid[thankyoupage]=  (ashampoo.anti.virus__2309_il321356.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3038&instid[appname]=world war z audiobook unabridged_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=world war z audiobook unabridged&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-15T05:26:25.292857 00:00&parameter=world war z audiobook unabridged&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-15T05:26:25.292857 00:00&parameter=world war z audiobook unabridged&ti1=1240000&ti2=0&ti3=2013-12-15T05:26:25.292857 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3039&instid[appname]=world war z audiobook unabridged_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=world war z audiobook unabridged&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-15T05:26:25.292857 00:00&parameter=world war z audiobook unabridged&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-15T05:26:25.292857 00:00&parameter=world war z audiobook unabridged&ti1=1240000&ti2=0&ti3=2013-12-15T05:26:25.292857 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

38 / 68    (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.26&campid=6250&instid[appname]=Fraps 3.5.99 Setup&instid[appsetupurl]=http://www58.zippyshare.com/v/.../file.html&instid[cmdline]=Fraps 3.5.99 Setup&instid[appimageurl]=http://freegamerecordingsoftware.com/wp-content/uploads/2013/02/Fraps-logo.png&prefix=Fraps 3.5.99 Setup&instid[thankyoupage]=http://www58.zippyshare.com/v/.../file.html  (ashampoo.anti.virus__2309_il321356.exe)

9 / 68      (PUP)
http://www.requestdownload.com/download.php?version=1.1.5.90&campid=5547&instid[appname]=pervasive.sql.v11.keygen.hotfile&instid[appsetupurl]=http://17.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=pervasive.sql.v11.keygen.hotfile&instid[thankyoupage]=http://.../upgrade&ti1=w144s0i923p16e9c0&ti2=IZDO7B8lfDy56S77vYCxDxURGQXyAWoqsthX0X1G9ZaUErzhnwq7hjyVgKeLguyJmOB7E9JVo_iXSTlD3X1E33E  (idm.6055.silent.install.exe__3039_i594856322_il4301210.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3516&instid[appname]=free sims 3 expansion packs_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=free sims 3 expansion packs&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-14T16:46:33.307848 00:00&parameter=free sims 3 expansion packs&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-14T16:46:33.307848 00:00&parameter=free sims 3 expansion packs&ti1=1240000&ti2=0&ti3=2013-12-14T16:46:33.307848 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

10 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=2789&instid[appname]=reading for writers 14th edition pdf_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=reading for writers 14th edition pdf&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=500&ti2=2013-12-16T03:15:48 00:00&ti3=&parameter=reading for writers 14th edition pdf&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=500&ti2=2013-12-16T03:15:48 00:00&ti3=&parameter=reading for writers 14th edition pdf&ti1=500&ti2=2013-12-16T03:15:48 00:00&ti3=  (omega a cualta mi gata__3515_i194220723_il10364354.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3516&instid[appname]=microsoft security essentials for windows xp sp2 32 bit free_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=microsoft security essentials for windows xp sp2 32 bit free&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-14T20:56:27.396137 00:00&parameter=microsoft security essentials for windows xp sp2 32 bit free&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-14T20:56:27.396137 00:00&parameter=microsoft security essentials for windows xp sp2 32 bit free&ti1=1240000&ti2=0&ti3=2013-12-14T20:56:27.396137 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3039&instid[appname]=Keeping With the KardashiansS08E21 Very Merry Christmas 720p HDTV x264 TTVa mkv flv.flv_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=Keeping With the KardashiansS08E21 Very Merry Christmas 720p HDTV x264 TTVa mkv flv.flv&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=500000&ti2=0&ti3=2013-12-12T20:55:44.500028 00:00&parameter=Keeping With the KardashiansS08E21 Very Merry Christmas 720p HDTV x264 TTVa mkv flv.flv&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=500000&ti2=0&ti3=2013-12-12T20:55:44.500028 00:00&parameter=Keeping With the KardashiansS08E21 Very Merry Christmas 720p  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

9 / 68      (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3038&instid[appname]=Jimmy.Carr.Telling.Jokes.DVDRip.XviD HAGGiS.avi.mp4_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=Jimmy.Carr.Telling.Jokes.DVDRip.XviD HAGGiS.avi.mp4&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=500000&ti2=0&ti3=2013-12-12T09:28:55.413071 00:00&parameter=Jimmy.Carr.Telling.Jokes.DVDRip.XviD HAGGiS.avi.mp4&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=500000&ti2=0&ti3=2013-12-12T09:28:55.413071 00:00&parameter=Jimmy.Carr.Telling.Jokes.DVDRip.XviD HAGGiS.avi.mp4&ti1=500000&ti2=0&ti3=2013-12-12T09:28:55.413071 00:00  (hentai anime__3516_i188183694_il9154614.exe)

9 / 68      (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3515&instid[appname]=photoshop cs2 keygen paradox_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=photoshop cs2 keygen paradox&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=1240000&ti2=0&ti3=2013-12-16T21:58:12.690357+00:00&parameter=photoshop cs2 keygen paradox&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=1240000&ti2=0&ti3=2013-12-16T21:58:12.690357+00:00&parameter=photoshop cs2 keygen paradox&ti1=1240000&ti2=0&ti3=2013-12-16T21:58:12.690357 00:00  (primo ramdisk 5.6 x64 crack__3039_i195881698_il10711664.exe)

16 / 68    (Adware)
http://www.requestdownload.com/download.php?version=1.1.5.98&campid=3515&instid[appname]=MSC Adams 2012.1.3 (x32 x64)_Downloader&instid[appsetupurl]=http://download.aminst.net/d1/setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.aminst.net/d1/logo150x150.png&prefix=MSC Adams 2012.1.3 (x32 x64)&instid[thankyoupage]=http://download.aminst.net/.../thank_you.php?ti1=300000&ti2=3&ti3=2013-12-15T05:16:31.494500+00:00&parameter=MSC Adams 2012.1.3 (x32 x64)&instid[interrupted]=http://download.aminst.net/.../interrupted.php?ti1=300000&ti2=3&ti3=2013-12-15T05:16:31.494500+00:00&parameter=MSC Adams 2012.1.3 (x32 x64)&ti1=300000&ti2=3&ti3=2013-12-15T05:16:31.494500 00:00  (konica minolta 423 series pcl driver__3038_i191530555_il9833024.exe)

 
Latest 30 of 40 download URLs

The following 16 files have been seen to comunicate with www.requestdownload.com in live environments.

TCP » 107.20.210.63:80
magiciso maker v54251 spanish__3039_i1081707458_il1646000.exe

TCP » 107.20.210.63:80
gta 5 pc installer__5247_il384.exe

TCP » 23.21.228.251:80
pes.201__7214_il332.exe

TCP » 23.23.96.46:80
flashplayersetup__3873_i264147895_il3.exe (Installer by Amônétízé)

TCP » 23.23.96.46:80
setup__4615.exe (Installer)

TCP » 50.17.206.16:80
Google.Chrome__2309_il52306.exe

TCP » 50.17.206.16:80
Client.exe

TCP » 50.17.206.16:80
Client.exe

TCP » 50.17.206.16:80
file.downloader__9581_il263.exe

TCP » 50.17.209.45:80
pes.201__7214_il332.exe

TCP » 50.17.209.45:80
Client.exe

TCP » 50.17.209.45:80
afirst.exe

TCP » 54.225.181.84:80
EagleGet.exe (EagleGet Downloader by EagleGet.com)

TCP » 54.225.181.84:80
skyhook wifi hack password 2013 zip registration key__3038_i356390957_il5637585.exe (Installer)

TCP » 54.225.181.84:80
kmspico 9.1.3 final, activator all windows and office__4502_il16014.exe (Installer)

TCP » 54.225.181.84:80
updater.exe (Installer)

TCP » 54.225.181.84:80
microsoft office 2013 professional plus full activator crack (32.bit-64.bit)__6266_il12065.exe

URL:
http://www.requestdownload.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.15 (Red Hat) (PHP/5.3.3)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.