home

dl12.afterdawn.com

AfterDawn Oy

Domain Information

The domain dl12.afterdawn.com registered by AfterDawn Oy was initially registered in March of 1999 through CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM. This domain has been seen distributing various forms of adware (some being very aggressive) directly or via bundled installations. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher AfterDawn who is located in Oulu, Finland.
Registrar:
CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Wednesday, March 31, 1999

Expires date:
Sunday, March 31, 2019

Updated date:
Tuesday, February 11, 2014

Root domain:
afterdawn.com

Whois:
1 afterdawn.com record

The domain dl12.afterdawn.com has been seen to resolve to the following IP address.

92.242.140.21
unallocated.barefruit.co.uk
May 4, 2015

File downloads found at URLs served by dl12.afterdawn.com.

0 / 68
http://dl12.afterdawn.com/download/1b580d2f486f6409e47e5d5377a50cff/51332430/.../mseinstall_x64_EN_v4.1.0522.0.exe  (MSEInstall.exe)

0 / 68
http://dl12.afterdawn.com/download/3cefd1ab0a165415ef3b64737f680105/52ca0729/.../Firefox-Setup-EN-15.0.1.exe  (firefox setup 15.0.1.exe)

0 / 68
http://dl12.afterdawn.com/download/b4aceef7a6a7a1181cb061c38693ace3/52fe796f/.../Firefox_Setup_25.0.1.exe  (31699090_stp.exe)

The following 230 files have been seen to comunicate with dl12.afterdawn.com in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

URL:
http://dl12.afterdawn.com/

Web server:
nginx/1.0.15

download.fi

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.