home

download.easydl.net

Anonymous Domain Registration Service

Domain Information

The domain download.easydl.net registered by Anonymous Domain Registration Service was initially registered in February of 2016 through KEY-SYSTEMS GMBH. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tilburg, Noord-Brabant within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
KEY-SYSTEMS GMBH

Server location:
Noord-Brabant, Netherlands (NL)

Create date:
Wednesday, February 10, 2016

Expires date:
Friday, February 10, 2017

Updated date:
Wednesday, February 10, 2016

ASN:
AS50673 SERVERIUS-AS Serverius Holding B.V.,NL

Root domain:
easydl.net

Whois:
1 easydl.net record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.DownloadAssistant.Bundler (M), PUP.Air Software.Download.Bundler (M), PUP.Vittalia.Software.Installer (M), PUP.AirSoftware.Bundler.Meta (M), PUP.Vittalia (M), PUP.Air Software (M)
100.00%

The domain download.easydl.net has been seen to resolve to the following 3 IP addresses.

185.56.145.91
premium07.totaalholding.nl
July 8, 2016

185.56.145.27
www58.totaalholding.nl
May 17, 2016

159.203.107.180
fd-03-do-e-ny-3.gtdlrfwd.com
April 11, 2016

File downloads found at URLs served by download.easydl.net.

1 / 68      (Adware)
http://download.easydl.net/v2/click/jsttxfb6/?d=http://.../uploads/downloads/install_flash_player_20_plugin.exe&key=8d8f5e4a9b030fc7b185237ac56f414b1faaf45c25edce6a92a04ea330f69e6d&sid=easydl-flash-player&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (flash player.exe)

1 / 68      (PUP)
http://download.easydl.net/v2/click/huj37eve/?d=http://.../uploads/downloads/ChromeSetup (1).exe&key=63970040c84c9c0fbe80dd383bc95286f6f2b7ed0b75e734ab5ff73d36f23ac6&sid=easydl-chrome&uid=&affiliate_image=&product_image=http://www.downloadchrome.org/images/image-installer.png&icon=http://.../favicon.ico&n=Chrome&filename=Chrome  (chrome.exe)

0 / 68
http://download.easydl.net/v2/click/huj37eve/?d=http://.../uploads/downloads/install_flash_player_20_plugin.exe&key=8d8f5e4a9b030fc7b185237ac56f414b1faaf45c25edce6a92a04ea330f69e6d&sid=easydl-flash-player&uid=&affiliate_image=&product_image=http://www.downloadflash.net/images/image-installer.png&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (flash player.zip)

1 / 68      (Adware)
http://download.easydl.net/v2/click/fimjsqkl/?d=http://.../uploads/downloads/install_flash_player_20_plugin.exe&key=8d8f5e4a9b030fc7b185237ac56f414b1faaf45c25edce6a92a04ea330f69e6d&sid=easydl-flash-player&uid=&affiliate_image=&product_image=http://www.downloadflash.net/images/image-installer.png&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (flash player.exe)

1 / 68      (Adware)
http://download.easydl.net/v2/click/huj37eve/?d=http://.../uploads/downloads/jre-8u73-windows-i586-iftw.exe&key=d112edbd181745f8c39de54a2bfb084a89d3935c120af431fae813f711253535&sid=easydl-java&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Java&filename=Java  (java.exe)

1 / 68      (PUP)
http://download.easydl.net/v2/click/fimjsqkl/?d=http://.../uploads/downloads/install_flash_player_20_plugin.exe&key=8d8f5e4a9b030fc7b185237ac56f414b1faaf45c25edce6a92a04ea330f69e6d&sid=easydl-flash-player&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (flash player.exe)

1 / 68      (Adware)
http://download.easydl.net/v2/click/huj37eve/?d=http://.../uploads/downloads/ChromeSetup (1).exe&key=63970040c84c9c0fbe80dd383bc95286f6f2b7ed0b75e734ab5ff73d36f23ac6&sid=easydl-chrome&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Chrome&filename=Chrome  (chrome.exe)

1 / 68      (Adware)
http://download.easydl.net/v2/click/huj37eve/?d=http://.../uploads/downloads/install_flash_player_20_plugin.exe&key=8d8f5e4a9b030fc7b185237ac56f414b1faaf45c25edce6a92a04ea330f69e6d&sid=easydl-flash-player&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (flash player.exe)

1 / 68      (Adware)
http://download.easydl.net/v2/click/jsttxfb6/?d=/uploads/downloads/install_flash_player_20_plugin.exe&key=8335096ad79a04624a0c68d66c68f3e91d51fa20065d68b7f870287eb175e562&sid=easydl-flash-player&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (flash player.exe)

1 / 68      (PUP)
http://download.easydl.net/v2/click/jsttxfb6/?d=http://.../uploads/downloads/jre-8u73-windows-i586-iftw.exe&key=d112edbd181745f8c39de54a2bfb084a89d3935c120af431fae813f711253535&sid=easydl-java&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Java&filename=Java  (java.exe)

1 / 68      (Adware)
http://download.easydl.net/v2/click/fimjsqkl/?d=http://.../uploads/downloads/ChromeSetup (1).exe&key=63970040c84c9c0fbe80dd383bc95286f6f2b7ed0b75e734ab5ff73d36f23ac6&sid=easydl-chrome&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Chrome&filename=Chrome  (chrome.exe)

1 / 68      (Adware)
http://download.easydl.net/v2/click/fimjsqkl/?d=/uploads/downloads/install_flash_player_20_plugin.exe&key=8335096ad79a04624a0c68d66c68f3e91d51fa20065d68b7f870287eb175e562&sid=easydl-flash-player&uid=&affiliate_image=&product_image=&icon=http://.../favicon.ico&n=Flash Player&filename=Flash Player  (setup.exe)

The following 2 files have been seen to comunicate with download.easydl.net in live environments.

TCP » 185.56.145.91:80
browser.exe (Browser)

TCP » 185.56.145.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://download.easydl.net/

Title:
“Welcome to nginx!”

Web server:
nginx/1.4.6 (Ubuntu)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.