down1oads.com

Somoto Ltd.  (via a Proxy Registrant)

Domain Information

The domain down1oads.com is registered by proxy through GODADDY.COM, LLC and was originally registered in April of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Dusseldorf, Nordrhein-Westfalen within Germany which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Somoto Ltd. who is located in Tel Aviv, Israel.
Registrar:
GODADDY.COM, LLC

Server location:
Nordrhein-Westfalen, Germany (DE)

Create date:
Monday, April 16, 2012

Expires date:
Sunday, April 16, 2017

Updated date:
Tuesday, May 05, 2015

ASN:
AS25074 INETBONE-AS MESH GmbH

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BetterInstaller.Somoto.O, PUP.BetterInstaller.Somoto.j, PUP.BetterInstaller.Somoto.x, PUP.BetterInstaller.Somoto.p, PUP.BetterInstaller.Somoto.U, PUP.BetterInstaller.Somoto.DD, PUP.Somoto.Bundler (M), PUP.Somoto (M)
100.00%

Sophos
Somoto BetterInstaller
74.07%

ESET NOD32
Win32/Somoto, Win32/Somoto potentially unwanted
74.07%

G Data
Win32.Application.Somoto, NSIS.Application.Somoto, Application.Bundler.Somoto
74.07%

AVG
AdInstaller.Somoto, Downloader
74.07%

Malwarebytes
PUP.Optional.Somoto, PUP.Optional.Somoto.A
70.37%

avast!
Win32:Somoto-F [PUP], Win32:Somoto-J [PUP], Win32:Somoto-O [PUP]
70.37%

Dr.Web
Adware.Somoto.17, Adware.Downware.1184, Trojan.MulDrop4.11744
66.67%

Clam AntiVirus
Win.Adware.Somoto, Adware.Somoto-1, Trojan.Agent-267630
66.67%

VIPRE Antivirus
BetterInstaller, Trojan.Win32.Generic
66.67%

Avira AntiVirus
APPL/Somoto.Gen2, APPL/Somoto.chj, APPL/Somoto.LP, APPL/Somoto.cep, PUA/Somoto.Gen2
66.67%

Comodo Security
Application.Win32.Somoto.A, Application.Win32.Somoto.DTL
62.96%

K7 AntiVirus
Unwanted-Program
59.26%

K7 Gateway Antivirus
Unwanted-Program
55.56%

Trend Micro House Call
TROJ_GEN.R0CBH07LB13, TROJ_GEN.R0CBH07LA13, TROJ_GEN.F0C2C00KU13, TROJ_GEN.R0C1H07LC13, TROJ_GEN.R0CBB01AD14, TROJ_GEN.F0C2C00LJ13
55.56%

The domain down1oads.com has been seen to resolve to the following IP address.

January 6, 2014

File downloads found at URLs served by down1oads.com.

1 / 68      (Adware)

24 / 68    (Adware)

19 / 68    (Adware)

29 / 68    (Adware)

1 / 68      (Adware)
http://down1oads.com/.../FreeZipSetup-ewQklnw.exe  (2a670850467bc669c7ee1f473084cc2c)

26 / 68    (Adware)
http://down1oads.com/.../FreeAudioConverterSetup-czRoPkZ.exe  (freeaudioconvertersetup-4iqsbkh.exe)

1 / 68      (Adware)
http://down1oads.com/.../FLVPlayerSetup-N87647gLu.exe  (2d330be060486edb39c999d98d55a26a)

1 / 68      (Adware)
http://down1oads.com/.../FLVPlayerSetup-N35BP7oya.exe  (d426cececd023a230576b972bb9f8ea4)

1 / 68      (Adware)
http://down1oads.com/.../FLVPlayerSetup-N2T99Sh5F.exe  (5c73f1349d076d3dee378fe37e5863b7)

1 / 68      (Adware)
http://down1oads.com/.../FLVPlayerSetup-N3fKllcbK.exe  (ed7756978682c81a85b98699f04ff5ce)

1 / 68      (Adware)
http://down1oads.com/.../FreeZipSetup-2m8aCYQ.exe  (4412ca6b5b79408621d5ceda54f6584f)

1 / 68      (Adware)
http://down1oads.com/.../VideoPlayer-6ywfCRN.exe  (b70d16844f1904582d898936e5429304)

29 / 68    (Adware)

35 / 68    (Adware)
http://down1oads.com/.../VideoPlayer-4BqeTFn.exe  (flvplayersetup-ej9y5sm.exe)

25 / 68    (Adware)
http://down1oads.com/.../7Zip-2tG1Ofe.exe  (pokemon_y_3dscontrast-ck9jbq1.exe)

23 / 68    (Adware)

22 / 68    (Adware)
http://down1oads.com/.../FLVPlayerSetup-N3MiW2hVY.exe  (d20506bbead5df7c5e7ce8fb18071d06)

23 / 68    (Adware)

22 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-NeQsoHjEZ.exe  (b3cd80045962ccd29f85337bda151fd9)

31 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-N2hUpG7ZB.exe  (b4cde987e49b0b52d9f789eb5b4c9a07)

18 / 68    (Adware)

19 / 68    (Adware)

13 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-N6r619NCj.exe  (221de2f2df8de3230ee5c01e6feec76a)

25 / 68    (Adware)

27 / 68    (Adware)
http://down1oads.com/.../reaver-aC1k9HK.exe  (advancedsystemcarepro710387multilingual-7tcst79.exe)

27 / 68    (Adware)
http://down1oads.com/.../AvastISAV-9rJzAbf.exe  (advancedsystemcarepro710387multilingual-7tcst79.exe)

25 / 68    (Adware)

25 / 68    (Adware)

24 / 68    (Adware)
http://down1oads.com/.../7Zip-aT54p0h.exe  (ouvrageshydrauliquesbykingbreakwwwtunisiasatcom-aqffgof.exe)

 
Latest 30 of 38 download URLs

January 6, 2014

URL:
http://down1oads.com/

Web server:
nginx

Facebook:
Shares:  1

Statistics above are for the previous month of July 2017.