4sd.files-download-71.com

Corp New Ventures Services

Domain Information

The domain 4sd.files-download-71.com registered by Corp New Ventures Services was initially registered in January of 2016 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Zurich, Zurich within Switzerland which resides on the RIPE Network Coordination Centre network.
Registrar:
DOMAINS OF ORIGIN, LLC

Server location:
Zurich, Switzerland (CH)

Create date:
Friday, January 22, 2016

Expires date:
Sunday, January 22, 2017

Updated date:
Friday, January 29, 2016

ASN:
AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaxigetLimited.Y, PUP.MaxigetLimited.P, PUP.MaxigetLimited.d, PUP.New IT Limited, PUP.New IT Limited.Maxiget.Bundler (M), PUP.New IT Limited.Maxiget.Installer (M), PUP.New IT Limited.Maxiget (M), PUP.New IT Limited.NewIT.Bundler (M), PUP.New IT Limited (M)
100.00%

ESET NOD32
Win32/4Shared.AC potentially unwanted application, Win32/4Shared.AE potentially unwanted application
33.33%

Dr.Web
Trojan.DownLoader11.47023, Adware.Downware.9208
33.33%

McAfee
4shared
33.33%

NANO AntiVirus
Trojan.Win32.Badur.djjutj, Riskware.Win32.Downware.djhyre
33.33%

Avira AntiVirus
TR/Agent.84000, APPL/4Shared.43944, APPL/Downloader.Gen4
33.33%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Downloader.Agent
33.33%

Panda Antivirus
Trj/Genetic.gen, Trj/Downloader.WKR
33.33%

Comodo Security
Application.Win32.4Shared.FG, Application.Win32.Maxiget.HSR
33.33%

Agnitum Outpost
PUA.4Shared
33.33%

IKARUS anti.virus
PUA.4Shared, Trojan.Win32.Badur
33.33%

K7 AntiVirus
Unwanted-Program , Trojan
25.00%

AhnLab V3 Security
Win-Trojan/Malpacked3.Gen, Trojan/Win32.Agent
25.00%

VIPRE Antivirus
Threat.4150696
25.00%

Lavasoft Ad-Aware
Gen:Variant.Strictor.70439, Gen:Variant.Application.Symmi.49456
16.67%

The domain 4sd.files-download-71.com has been seen to resolve to the following 4 IP addresses.

February 25, 2016

January 27, 2016

November 29, 2014

November 29, 2014

File downloads found at URLs served by 4sd.files-download-71.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

26 / 68    (Adware)
https://4sd.files-download-71.com/.../Maple 9.5.exe  (6534e427349c6dd51449e6d67674877b)

12 / 68    (Adware)
https://4sd.files-download-71.com/.../???? ?????? & ???? ?????? ????? ???.exe  (وليد الشامي & راشد الماجد سافرت عني.exe)

14 / 68    (Adware)
https://4sd.files-download-71.com/.../4shared_Desktop.exe  (d14501e0be1ba591b99ac8cdd0cbdbda)

29 / 68    (Adware)

The following 2 files have been seen to comunicate with 4sd.files-download-71.com in live environments.

URL:
http://4sd.files-download-71.com/

Web server:
Apache