home

dl10.download.fi

Domain Information

This domain is owned and operated by AfterDawn.
Server location:
Northern Ireland, United Kingdom (GB)

Root domain:
download.fi

Registered by:
AfterDawn

Scanner detections:
Adware distribution

Scan engine
Details
Detections

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
100.00%

The domain dl10.download.fi has been seen to resolve to the following IP address.

92.242.140.21
unallocated.barefruit.co.uk
May 4, 2015

File downloads found at URLs served by dl10.download.fi.

0 / 68
http://dl10.download.fi/download/f3ce91097f108e50a1cf1db130c28911/.../jre-7u5-windows-x64.exe  (cce732e30f920c5a616d70b168c65d3c)

0 / 68
http://dl10.download.fi/download/c675a363abdced9212cf8dfa8d805d46/50d980ab/.../vegaspro11.0.370_32bit.exe  (8b7bc8aae20ecf0ee62d7b16b5048f8d)

1 / 68
http://dl10.download.fi/download/fd8e8d16c096b3104b386e7401818b99/50befa95/.../cpu-z_1.62-setup-en.exe  (735c5cc3a41d950ec780f116e7d941d5)

The following 230 files have been seen to comunicate with dl10.download.fi in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

afterdawn.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.