dl.fahdmr.com

Grupo Blidoo S.L.

Domain Information

The domain dl.fahdmr.com registered by Grupo Blidoo S.L. was initially registered in August of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Wednesday, August 21, 2013

Expires date:
Tuesday, August 21, 2018

Updated date:
Wednesday, August 21, 2013

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.FIRSERIASL.V, PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.PopelerS.Installer (M), PUP.Solimba (M)
100.00%

Malwarebytes
PUP.Optional.Solimba.mr
5.56%

K7 Gateway Antivirus
Unwanted-Program
5.56%

avast!
Win32:Firseria-A [PUP]
5.56%

Agnitum Outpost
PUA.Firseria
5.56%

Sophos
Solimba Installer
5.56%

Comodo Security
Application.Win32.Solimba.J
5.56%

Dr.Web
Adware.Downware.1433
5.56%

VIPRE Antivirus
DownloadMR
5.56%

Avira AntiVirus
TR/Crypt.ULPM.Gen
5.56%

Vba32 AntiVirus
AdWare.Linkun
5.56%

ESET NOD32
Win32/FirseriaInstaller (variant)
5.56%

Rising Antivirus
PE:PUF.FirseriaInstaller@CV!1.5C42
5.56%

IKARUS anti.virus
Virus.Win32.Cryptor
5.56%

Fortinet FortiGate
Adware/Firseria
5.56%

The domain dl.fahdmr.com has been seen to resolve to the following 2 IP addresses.

a23-67-250-112.deploy.static.akamaitechnologies.com
February 20, 2014

a23-67-250-97.deploy.static.akamaitechnologies.com
February 20, 2014

File downloads found at URLs served by dl.fahdmr.com.

1 / 68      (Adware)
http://dl.fahdmr.com/n/3.0.18.4/.../YouTube Catcher.exe  (95397588de8a4816e58e9868d424c27d)

1 / 68      (Adware)
http://dl.fahdmr.com/n/3.0.18.4/.../GTA IV.exe  (35628a14bbc8692be52ccf704c1608f8)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.fahdmr.com/n/3.1.22.18.3/.../FIFA 12.exe  (55282e2cb30f2efaea9df91029d72a6b)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.fahdmr.com/n/3.0.18.4/.../Google Chrome.exe  (d74230f9c848f29d2e4294e346077d26)

0 / 68
http://dl.fahdmr.com/g/.../skype_dsetup.exe  (7dda96fdd1df4ed5510e1c1a1ab5cee6)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://dl.fahdmr.com/n/3.0.18.4/.../Adobe Reader.exe  (30574d57d2267b0cb95e2122b00c47c6)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

29 / 68    (Adware)

The following 32 files have been seen to comunicate with dl.fahdmr.com in live environments.

 
Latest 20 of 32 files

URL:
http://dl.fahdmr.com/

Web server:
nginx (PHP/5.3.10-1ubuntu3.9)