home

dl18.download.fi

Domain Information

This domain is owned and operated by AfterDawn.
Server location:
Virginia, United States (US)

ASN:
AS30633 LEASEWEB-US - Leaseweb USA, Inc.,US

Root domain:
download.fi

Registered by:
AfterDawn

Scanner detections:
Adware distribution

Scan engine
Details
Detections

ESET NOD32
Detection.Undefined
50.00%

Avira AntiVirus
TR/Dropper.Gen
50.00%

Reason Heuristics
nbsp;
50.00%

The domain dl18.download.fi has been seen to resolve to the following IP address.

108.59.1.215
imuri18.afterdawn.net
September 4, 2014

File downloads found at URLs served by dl18.download.fi.

2 / 68
http://dl18.download.fi/download/968dcb23fbfe5cba9bc8664c48933b09/53b45737/.../wrar510.exe  (2b5e45ed89904404e8ffdcd9d744314b)

0 / 68
http://dl18.download.fi/download/2403446df431412396de9272ac388cb2/54a2f144/.../gimp-2.8.14-64bit-install.exe  (ef7d70ed1bfb612e78210594c2f55a2e)

0 / 68
http://dl18.download.fi/download/1bb4449934db93237516ccd0834ceccc/548e1e84/.../easycleaner_v2.0.6.380.exe  (easycleaner_rus_setup.exe)

0 / 68
http://dl18.download.fi/download/8c6df10669894cfb6ecc658c1e680256/546f08cb/.../Nokia_PC_Suite_eng_web_v7.1.51.0.exe  (nokia_pc_suite_eng_web.exe)

0 / 68
http://dl18.download.fi/download/c0d672538926f05ffedd509c3d30df05/540ae78c/.../Easy_Viewer_IP_Cam_v2.0.exe  (20bd3cb98d813aa163f8ba63b554b6c5)

1 / 68      (Malware)
http://dl18.download.fi/download/65297bec086246cb1369fccfe920c572/53e26cc7/.../vlc-2.1.5-win32.exe  (f78940628eb76ab6e654c19ee33f2f89)

0 / 68
http://dl18.download.fi/download/ecf21987ece4b5120cbec35a72d64d4d/545183ca/.../Spotify_v0.6.4.0.exe  (0ad1c215b574407a815ec71d87be9a10)

0 / 68
http://dl18.download.fi/download/5e9a99f92e97fbaea6490663d5855ffd/53acd4c0/.../32bit_Win7_Win8_Win81_R274.exe  (b7f2ff8da82b7d7bca6c541d3eb8fdfa)

The following file have been seen to comunicate with dl18.download.fi in live environments.

TCP » 108.59.1.215:80
bs_disguise_folders.exe

afterdawn.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.