The domain dl.sysnetdownload.com registered by Communigal Communication Ltd was initially registered in November of 2014 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrant:
Communigal Communication Ltd
Registrar:
NANJING IMPERIOSUS TECHNOLOGY CO. LTD.
Server location:
Massachusetts, United States (US)
Create date:
Friday, November 21, 2014
Expires date:
Saturday, November 21, 2015
Updated date:
Friday, November 21, 2014
ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.CondestilDevelopmentssl.U, PUP.Installer.FIRSERIASL.R, PUP.CondestilDevelopmentssl.g, PUP.Installer.CondestilDevelopmentssl.N, PUP.Installer.CondestilDevelopmentssl.P, PUP.Installer.FIRSERIASL.L, PUP.Installer.FIRSERIASL.X, PUP.Installer.FIRSERIASL.H, PUP.Installer.FIRSERIASL.AA, PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.Solimba.CondestilDevelopments.Bundler (M), PUP.Solimba.CondestilDevelopments.Installer (M), PUP.Solimba.Installer, PUP.Solimba.Condesti.Installer (M), PUP.Solimba.Condesti.Bundler (M), PUP.Solimba.Condesti (M), PUP.Solimba (M)
100.00%
Malwarebytes
PUP.Optional.Firseria, PUP.Optional.Morstar, PUP.Optional.Condestil, PUP.Optional.Solimba
31.43%
VIPRE Antivirus
DownloadMR, Trojan.Win32.Generic, Threat.4150696
31.43%
G Data
Win32.Application.Morstar, Application.Bundler.Firseria
31.43%
Vba32 AntiVirus
Downware.Morstar
31.43%
Avira AntiVirus
APPL/FirseriaS.A.1, TR/Dropper.Gen, APPL/FirseriaM.A.1, APPL/Firseria.Gen8, TR/Crypt.XPACK.Gen
31.43%
Dr.Web
Trojan.MulDrop5.34677, Trojan.MulDrop5.34679, Trojan.DownLoader11.24441
28.57%
Comodo Security
Application.Win32.Firseria.MAP, Application.Win32.Solimba.KUY
28.57%
K7 AntiVirus
Unwanted-Program
28.57%
Agnitum Outpost
PUA.Firseria, PUA.Solimba
28.57%
Sophos
Solimba Installer, PUA 'Solimba Installer'
25.71%
avast!
Win32:Trojan-gen, Win32:PUP-gen [PUP]
25.71%
AVG
Adware BundleApp.GO, BundleApp_r, Generic, Adware BundleApp_r, Adware BundleApp.GI
22.86%
AhnLab V3 Security
PUP/Win32.101Alemi, PUP/Win32.Firseria
22.86%
MicroWorld eScan
Application.Bundler.Firseria.M, Trojan.Agent.BEOF, Application.Bundler.Firseria.T
22.86%
The domain dl.sysnetdownload.com has been seen to resolve to the following 7 IP addresses.
a23-0-160-73.deploy.static.akamaitechnologies.com
August 17, 2014
a23-0-160-49.deploy.static.akamaitechnologies.com
August 17, 2014
a23-67-242-51.deploy.static.akamaitechnologies.com
August 10, 2014
a23-67-242-26.deploy.static.akamaitechnologies.com
August 10, 2014
a23-67-243-25.deploy.static.akamaitechnologies.com
August 7, 2014
File downloads found at URLs served by dl.sysnetdownload.com.
Latest 30 of 35 download URLs
The following 807 files have been seen to comunicate with dl.sysnetdownload.com in live environments.
URL:
http://dl.sysnetdownload.com/
Google Analytics:
UA-48689684
Title:
“sysnetdownload.com”
Related Domains
30 of 618 related domains