home

files4.downloadnet1194.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain files4.downloadnet1194.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Myers, Florida within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Florida, United States (US)

Create date:
Thursday, July 2, 2015

Expires date:
Saturday, July 2, 2016

Updated date:
Thursday, July 2, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
downloadnet1194.com

Whois:
1 downloadnet1194.com record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TomorrowSoftware.SpiralMedia.Bundler (M), PUP.DownloadAdmin.RazorEdgeMedia.Installer (M), PUP.DownloadAdmin.RazorEdg.Installer (M), PUP.TomorrowSoftware.PowerPla.Bundler (M), PUP.DownloadAdmin.SafeInst.Installer (M), PUP.TomorrowSoftware.Deepwell.Bundler (M), PUP.BrokenSp.Installer (M), PUP.Subtrend.Installer (M), PUP.DownloadAdmin.SuperCli.Installer (M), PUP.TomorrowSoftware.SpiralMe.Bundler (M), PUP.TomorrowSoftware.TrendInt.Installer (M), PUP.DownloadAdmin.FilesInf.Installer (M), PUP.TomorrowSoftware (M), PUP.DownloadAdmin (M)
97.92%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.08%

F-Secure
Application:W32/Generic.70053c248f!Online
2.08%

The domain files4.downloadnet1194.com has been seen to resolve to the following 82 IP addresses.

23.219.88.113
a23-219-88-113.deploy.static.akamaitechnologies.com
September 16, 2016

23.219.88.145
a23-219-88-145.deploy.static.akamaitechnologies.com
September 16, 2016

23.219.88.200
a23-219-88-200.deploy.static.akamaitechnologies.com
September 14, 2016

23.219.88.159
a23-219-88-159.deploy.static.akamaitechnologies.com
August 21, 2016

23.219.88.158
a23-219-88-158.deploy.static.akamaitechnologies.com
August 21, 2016

165.254.210.105
August 12, 2016

165.254.210.138
August 12, 2016

23.220.148.17
a23-220-148-17.deploy.static.akamaitechnologies.com
May 27, 2016

23.220.148.11
a23-220-148-11.deploy.static.akamaitechnologies.com
May 27, 2016

104.96.221.112
a104-96-221-112.deploy.static.akamaitechnologies.com
May 27, 2016

104.96.220.216
a104-96-220-216.deploy.static.akamaitechnologies.com
May 19, 2016

104.112.235.19
a104-112-235-19.deploy.static.akamaitechnologies.com
May 18, 2016

104.96.220.233
a104-96-220-233.deploy.static.akamaitechnologies.com
May 18, 2016

104.96.221.91
a104-96-221-91.deploy.static.akamaitechnologies.com
May 15, 2016

104.96.221.98
a104-96-221-98.deploy.static.akamaitechnologies.com
May 15, 2016

23.15.8.89
a23-15-8-89.deploy.static.akamaitechnologies.com
April 19, 2016

23.15.8.33
a23-15-8-33.deploy.static.akamaitechnologies.com
April 19, 2016

23.0.160.26
a23-0-160-26.deploy.static.akamaitechnologies.com
April 14, 2016

23.15.7.161
a23-15-7-161.deploy.static.akamaitechnologies.com
April 10, 2016

23.15.7.128
a23-15-7-128.deploy.static.akamaitechnologies.com
April 10, 2016

23.15.7.114
a23-15-7-114.deploy.static.akamaitechnologies.com
April 10, 2016

23.15.7.91
a23-15-7-91.deploy.static.akamaitechnologies.com
April 10, 2016

23.15.7.146
a23-15-7-146.deploy.static.akamaitechnologies.com
April 10, 2016

23.15.7.160
a23-15-7-160.deploy.static.akamaitechnologies.com
April 9, 2016

23.15.7.153
a23-15-7-153.deploy.static.akamaitechnologies.com
April 9, 2016

65.158.47.154
April 9, 2016

65.158.47.131
April 9, 2016

184.51.126.43
a184-51-126-43.deploy.static.akamaitechnologies.com
April 6, 2016

184.51.126.107
a184-51-126-107.deploy.static.akamaitechnologies.com
April 6, 2016

23.15.7.136
a23-15-7-136.deploy.static.akamaitechnologies.com
April 5, 2016

 
Showing 30 of 82 IP Addresses

File downloads found at URLs served by files4.downloadnet1194.com.

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=29520589&filename=The_Revenant_2015_72.exe&cb=1843998001&executable=1197357  (809f4b917bf360477b73b145502477a5)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=4535557&filename=setup.exe&cb=957628776&executable=1198105  (b0fba1eaaf2659377c8462b3d6485c45)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=2199755&filename=pack_de_mods.exe&cb=1762886163&executable=1198105  (4d171aaf39c5506de0dc8f15c7e6e594)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=43144965&filename=Slime_Rancher_v0_2.exe&cb=-1003118796&executable=1197357  (675962ffa87ccb1dacb8b462ee63e490)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=41087597&filename=PES_2006.exe&cb=1357878327&executable=1197357  (a1a18cc42e9272c0cd87ee9f8aa785f9)

1 / 68      (PUP)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=test_source&c=4s&country=TH&cb=-351414615&filename=__-_I_Love_Your_Smil.exe&productKey=wmiytf2axf5agzdjclkjezchpzxvrh54&osName=Windows&osVersion=7&browserName=Firefox&browserVersion=15&zTmp=1&executable=1188405  (cbdf353d6b92fbdade7ae745b1ea54f2)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=435319&filename=setup.exe&cb=445572889&executable=1197357  (0f8d241bdd84ce9da549f07c5df7667b)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=41936703&filename=Rajini_Murugan___U__.exe&cb=65126471&executable=1197357  (77626f6cb80ba0237928a0db943b0adf)

2 / 68      (false positives)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=38375607&filename=CS_GO__Counter-Strik.exe&cb=1697404990&executable=1197357  (wrar420.exe)

1 / 68      (Adware)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=4se&c=4se&country=BR&cb=-363220083&filename=setup.exe&productKey=kelm7u6l6pn3u4nbf4yfnkqqytchzz27&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1&executable=1196807  (6b964d9104079610b8143c87c11d0f17)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=96945&filename=setup.exe&cb=-562086240&executable=1197357  (bbb30cc8e9e61351064598c1304a6107)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=21171227&filename=MADYA_KU_BOMBA_-_NGW.exe&cb=581469588&executable=1198105  (aeefad024107da2268fa4cdcc12ad35c)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=41590139&filename=Les_Nouvelles_aventu.exe&cb=-1216685639&executable=1197357  (b90e5bebb4ec9d075b83be4567126d09)

1 / 68      (Adware)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=test_source&c=4scdn2&country=ID&cb=1884471735&filename=setup.exe&productKey=kelm7u6l6pn3u4nbf4yfnkqqytchzz27&osName=Windows&osVersion=8&browserName=Firefox&browserVersion=12&zTmp=1&executable=1197171  (ef98a80ca13810c8175053a6601a551d)

1 / 68      (PUP)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=test_source&c=4s&country=IN&cb=773329445&filename=Paraniraye_Ponnalakk.exe&productKey=mrkkrvpkl76aw6flvqrecu3pu3bdbj3k&osName=Windows&osVersion=7&browserName=Firefox&browserVersion=16&zTmp=1&executable=1188405  (e57ab90531c0ae3ea1ed3044839911a5)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=4005417&filename=Flare_Bike_Ya_Jozi.exe&cb=299916528&executable=1198105  (9998bede3668283ff5671457095805d1)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=41222957&filename=Pavada_2016_Malayala.exe&cb=-2104545985&executable=1197357  (0de5d327adaab9dc3866e5e274c59e25)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=715627&filename=setup.exe&cb=786577025&executable=1197357  (82a0297d4a0813f6814c97152be85354)

1 / 68      (PUP)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=test_source&c=dfh&country=NG&cb=-712588356&filename=MTN_BIS_SS_SS_INI_RE.exe&productKey=6nxpqth2wuve46skmz5r6jad2thij4sr&osName=Windows&osVersion=7&browserName=Firefox&browserVersion=15&zTmp=1&executable=1188405  (25e922ca8d5f0b951dacc45ef2221128)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/1191699/.../?bc=1191699&checksum=42341079&filename=Corel_Draw_6.exe&cb=1717486820&executable=1197357  (689d87edf2e8e1c7d5486bb4ecf020b2)

1 / 68      (PUP)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=4se&c=4se&country=US&cb=-1897300378&filename=setup.exe&productKey=yx5hrknndwfiobkjmkqdjk4jeqdrhqqz&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1&executable=1188405  (c023aba602f8846983f8d023cf290a2d)

1 / 68      (Adware)
http://files4.downloadnet1194.com/download/.../dl?bc=1191699&pid=nextad&brand=nextad&aid=test_aid&s=test_source&c=mon&country=AE&cb=-934308537&filename=Premam_2015_Malayala.exe&productKey=j3pw4hmxjbacdvvc46mdwkypi7k4yehy&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1&executable=1195931  (fd2f6135dcb8ffa99804eff361d4e817)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=75789&filename=setup.exe&cb=720035536&executable=1197357  (830bad600db5548e7a4fa9c230d5a59f)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=75789&filename=setup.exe&cb=-2040437564&executable=1198105  (8adde3895f6a9eac9a2b1902ab198865)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=77595&filename=setup.exe&cb=-1695879218&executable=1198105  (686d8cd344a500c35b3c5a4213bc7834)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=8613725&filename=setup.exe&cb=-1338288967&executable=1198105  (d4fef0786ec2962600c0e41fb2cf8bf4)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=337257&filename=setup.exe&cb=-1756770690&executable=1197357  (8ccfe9f82cb6c3edfb652010bd4ab2cb)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=26180521&filename=Bentley_STAAD_Pro_V8.exe&cb=-624751025&executable=1198105  (cc6ad2d164b17759fea0afe3c6f0605e)

1 / 68      (PUP)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=39080179&filename=Six_Days_Seven_Night.exe&cb=1833678962&executable=1197357  (3e129aacbd947a351e16b49be33f07d9)

1 / 68      (Adware)
http://files4.downloadnet1194.com/dl-pure/.../?bc=1191699&checksum=196129&filename=setup.exe&cb=73638374&executable=1198105  (d78d12a940a6c0552fcf98ac316e98a3)

 
Latest 30 of 420 download URLs

The following 919 files have been seen to comunicate with files4.downloadnet1194.com in live environments.

TCP » 104.112.235.19:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.51.126.99:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.80:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.75:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.104:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.107:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.82:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.219.88.200:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.99:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.49:80
updateadmin.exe

TCP » 184.51.126.80:80
plugin.exe

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.81:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.104:80
plugin.exe

TCP » 184.51.126.81:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.105:443
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 1,128 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.