home

dl.ddownload7.club

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ddownload7.club

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Malware-gen, Win32:Dropper-gen [Drp], Win32:Adware-gen [Adw], Win32:Kukacka
100.00%

ESET NOD32
NSIS/TrojanDownloader.Adload.R trojan, Win32/Sality.NBA virus
90.00%

Microsoft Security Essentials
Threat.Undefined
64.00%

Reason Heuristics
PUP.Vittalia (M), Adware.Generic.AT (M)
46.00%

Dr.Web
infected with Trojan.Vittalia.1532, - infected container c:\users\test\appdata\local\temp\b1e7db9651216d6918efec18332ff36f04f72919 Win3, Detection.Undefined, Win32.Sector.30
32.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Generic, not-a-virus:AdWare.Win32.AdLoad, Virus.Win32.Sality
10.00%

F-Prot
W32/S-c1e00a7b, W32/Virut.AI!Generic
8.00%

Quick Heal
Trojan.NSIS.Adload.A
6.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
6.00%

NANO AntiVirus
Trojan.Nsis.Downloader.dzlxjo
6.00%

ESET NOD32
NSIS/TrojanDownloader.Adload
6.00%

Rising Antivirus
NS:Trojan.Adload!1.A18D [F]
6.00%

Avira AntiVirus
ADWARE/Adware.Gen7
6.00%

G Data
NSIS.Application.PUPDownloader
6.00%

Fortinet FortiGate
Adware/Generic
6.00%

The domain dl.ddownload7.club has been seen to resolve to the following 128 IP addresses.

52.84.125.253
server-52-84-125-253.iad16.r.cloudfront.net
July 22, 2016

52.84.125.241
server-52-84-125-241.iad16.r.cloudfront.net
July 22, 2016

52.85.131.209
server-52-85-131-209.iad53.r.cloudfront.net
July 20, 2016

52.85.131.184
server-52-85-131-184.iad53.r.cloudfront.net
July 20, 2016

52.85.131.131
server-52-85-131-131.iad53.r.cloudfront.net
July 20, 2016

52.85.131.107
server-52-85-131-107.iad53.r.cloudfront.net
July 20, 2016

52.85.131.103
server-52-85-131-103.iad53.r.cloudfront.net
July 20, 2016

52.85.131.77
server-52-85-131-77.iad53.r.cloudfront.net
July 20, 2016

52.85.131.251
server-52-85-131-251.iad53.r.cloudfront.net
July 20, 2016

52.85.131.241
server-52-85-131-241.iad53.r.cloudfront.net
July 20, 2016

52.84.125.26
server-52-84-125-26.iad16.r.cloudfront.net
July 19, 2016

52.84.125.188
server-52-84-125-188.iad16.r.cloudfront.net
July 19, 2016

52.84.125.181
server-52-84-125-181.iad16.r.cloudfront.net
July 19, 2016

52.84.125.133
server-52-84-125-133.iad16.r.cloudfront.net
July 19, 2016

52.84.125.91
server-52-84-125-91.iad16.r.cloudfront.net
July 19, 2016

52.84.125.49
server-52-84-125-49.iad16.r.cloudfront.net
July 19, 2016

54.192.19.216
server-54-192-19-216.iad12.r.cloudfront.net
June 27, 2016

54.192.19.211
server-54-192-19-211.iad12.r.cloudfront.net
June 27, 2016

54.192.19.206
server-54-192-19-206.iad12.r.cloudfront.net
June 27, 2016

54.192.19.157
server-54-192-19-157.iad12.r.cloudfront.net
June 27, 2016

54.192.19.68
server-54-192-19-68.iad12.r.cloudfront.net
June 27, 2016

54.192.19.55
server-54-192-19-55.iad12.r.cloudfront.net
June 27, 2016

54.192.19.33
server-54-192-19-33.iad12.r.cloudfront.net
June 27, 2016

54.192.19.221
server-54-192-19-221.iad12.r.cloudfront.net
June 27, 2016

52.84.125.58
server-52-84-125-58.iad16.r.cloudfront.net
May 24, 2016

52.84.125.52
server-52-84-125-52.iad16.r.cloudfront.net
May 24, 2016

52.84.125.40
server-52-84-125-40.iad16.r.cloudfront.net
May 24, 2016

52.84.125.229
server-52-84-125-229.iad16.r.cloudfront.net
May 24, 2016

52.84.125.151
server-52-84-125-151.iad16.r.cloudfront.net
May 24, 2016

52.84.125.107
server-52-84-125-107.iad16.r.cloudfront.net
May 24, 2016

 
Showing 30 of 128 IP Addresses

File downloads found at URLs served by dl.ddownload7.club.

4 / 68      (PUP)
http://dl.ddownload7.club/stub_makerWMP.php?program=sevenzip&tid=5821495&pid=1&b_typ=pe&reb=1&name=Windows DRM Update  (windowsupdate-drm.exe)

The following 169 files have been seen to comunicate with dl.ddownload7.club in live environments.

TCP » 52.84.125.40:443
Client.exe

TCP » 52.85.142.172:80
jingling.exe

TCP » 52.85.142.99:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.33:80
saber.exe

TCP » 52.84.125.75:80
browser.exe (speed browser by Smart Applications)

TCP » 52.85.142.179:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.103:80
se.exe

TCP » 52.85.142.227:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.26:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.194:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.229:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.115:80
se.exe

TCP » 54.192.19.157:80
notification.exe

TCP » 52.85.142.194:443
messengertime.exe

TCP » 52.85.142.99:443
jingling.exe

TCP » 52.85.142.193:443
cloud.exe (Cloud by Gold Click)

TCP » 52.84.125.229:443
clearscreenplayerbrowser.exe

TCP » 54.192.19.157:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.172:80
UCBrowser.exe (by UCWeb)

TCP » 52.85.142.206:80
beamrise.exe (Beamrise by The Beamrise Authors)

 
Latest 20 of 386 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.