home

files4.filedownload13.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain files4.filedownload13.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Wednesday, February 25, 2015

Expires date:
Saturday, February 25, 2017

Updated date:
Thursday, February 25, 2016

Root domain:
filedownload13.com

Whois:
2 filedownload13.com records

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Tightrope.Bundler, PUP.Tightrope.Bundler, PUP.EBooksMedia.Installer (M), PUP.Tightrope.PourOverDigital.Bundler (M), PUP.DownloadAdmin.EBooksMedia.Installer (M), PUP.Tightrope.Blueis.Bundler (M), Threat.Win.Reputation.IMP, PUP.DownloadAdmin.EBooksMe.Bundler (M), PUP.DownloadAdmin.EBooksMe.Installer (M), PUP.DownloadAdmin (M)
96.67%

VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
20.00%

Dr.Web
Trojan.Vittalia.27, Trojan.Vittalia.65
20.00%

avast!
Win32:DownloadAdmin-H [PUP], Win32:DownloadAdmin-I [PUP]
20.00%

Bkav FE
W32.HfsAdware
20.00%

K7 AntiVirus
Unwanted-Program
20.00%

Agnitum Outpost
Riskware.Agent
20.00%

Clam AntiVirus
Win.Trojan.Downloadadmin
20.00%

NANO AntiVirus
Trojan.Win32.XPACK.dprfbr
20.00%

F-Prot
W32/S-e78893a9, W32/S-8649671e, W32/Trojan3.QYY
20.00%

AhnLab V3 Security
PUP/Win32.DownloadAdmin, PUP/Win32.AirAdInstaller
20.00%

Vba32 AntiVirus
Downloader.Agent
20.00%

AVG
Generic
20.00%

Avira AntiVirus
PUA/DownloadAdmin.Gen
16.67%

ESET NOD32
Win32/DownloadAdmin.I potentially unwanted application
13.33%

The domain files4.filedownload13.com has been seen to resolve to the following 33 IP addresses.

23.15.9.19
a23-15-9-19.deploy.static.akamaitechnologies.com
June 8, 2016

23.15.9.18
a23-15-9-18.deploy.static.akamaitechnologies.com
June 8, 2016

104.112.235.19
a104-112-235-19.deploy.static.akamaitechnologies.com
May 25, 2016

104.96.220.233
a104-96-220-233.deploy.static.akamaitechnologies.com
May 25, 2016

184.51.126.34
a184-51-126-34.deploy.static.akamaitechnologies.com
May 24, 2016

184.51.126.18
a184-51-126-18.deploy.static.akamaitechnologies.com
May 24, 2016

184.51.126.64
a184-51-126-64.deploy.static.akamaitechnologies.com
May 24, 2016

184.51.126.50
a184-51-126-50.deploy.static.akamaitechnologies.com
May 24, 2016

184.51.126.48
a184-51-126-48.deploy.static.akamaitechnologies.com
May 24, 2016

104.96.221.98
a104-96-221-98.deploy.static.akamaitechnologies.com
May 15, 2016

104.96.221.91
a104-96-221-91.deploy.static.akamaitechnologies.com
May 15, 2016

23.15.7.105
a23-15-7-105.deploy.static.akamaitechnologies.com
April 8, 2016

23.15.7.97
a23-15-7-97.deploy.static.akamaitechnologies.com
April 8, 2016

184.51.126.43
a184-51-126-43.deploy.static.akamaitechnologies.com
February 27, 2016

184.51.126.51
a184-51-126-51.deploy.static.akamaitechnologies.com
February 27, 2016

23.220.148.8
a23-220-148-8.deploy.static.akamaitechnologies.com
December 26, 2015

23.220.148.33
a23-220-148-33.deploy.static.akamaitechnologies.com
December 26, 2015

23.0.160.88
a23-0-160-88.deploy.static.akamaitechnologies.com
December 16, 2015

23.0.160.98
a23-0-160-98.deploy.static.akamaitechnologies.com
December 16, 2015

23.0.160.72
a23-0-160-72.deploy.static.akamaitechnologies.com
December 15, 2015

23.0.160.65
a23-0-160-65.deploy.static.akamaitechnologies.com
December 15, 2015

184.51.126.90
a184-51-126-90.deploy.static.akamaitechnologies.com
December 15, 2015

184.51.126.83
a184-51-126-83.deploy.static.akamaitechnologies.com
December 15, 2015

23.220.148.11
a23-220-148-11.deploy.static.akamaitechnologies.com
November 18, 2015

23.220.148.40
a23-220-148-40.deploy.static.akamaitechnologies.com
November 18, 2015

23.62.6.57
a23-62-6-57.deploy.static.akamaitechnologies.com
November 12, 2015

23.62.6.51
a23-62-6-51.deploy.static.akamaitechnologies.com
November 12, 2015

23.62.6.40
a23-62-6-40.deploy.static.akamaitechnologies.com
November 12, 2015

23.62.6.66
a23-62-6-66.deploy.static.akamaitechnologies.com
November 12, 2015

23.62.7.33
a23-62-7-33.deploy.static.akamaitechnologies.com
July 15, 2015

 
Showing 30 of 33 IP Addresses

File downloads found at URLs served by files4.filedownload13.com.

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=LEGO Worlds&filename=LEGO Worlds.exe&productKey=vks2cd5fgevy7z7suap7x75vshqvwdfs&zTmp=1&variation=norefer  (lego worlds.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?c=The Escapists&filename=The Escapists.exe&bc=1088000&productKey=ad3udesnfkswuj63qt6ddufd5bbkenxu&zTmp=1&variation=norefer  (the escapists.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1080274&variation=norefer  (gameofwarfireage-setup.exe)

0 / 68
http://files4.filedownload13.com/download/.../dl?bc=1129294&pid=rockybytes&brand=programwardrobe.com&country=US&variation=chwebsite&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&cb=-1237976383&src_browser=ie&zTmp=1  (angrybirds-setup.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1080088&variation=norefer  (clashofclans-setup.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=Counter-Strike Global Offensive&filename=Counter-Strike Global Offensive.exe&productKey=ebhvqgr4zyxuk6pjto77lvcjpzxx52ka&zTmp=1&variation=norefer  (counter-strike global offensive.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1087988&c=DA - Clash&filename=clash_of_clans.exe&productKey=rj6744c2dsiycgb4ilnydmzt5i2nqk7u&zTmp=1&variation=norefer  (dfdb3e0ddb5ccb4935e8a8476d86cbab)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=The Sims 3&filename=The Sims 3.exe&productKey=gkdesduid24uq2f3gunump2dbd3jpwow&zTmp=1&variation=norefer  (the sims 3.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1184387&variation=norefer  (gimp-setup.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?c=Unturned&filename=Unturned.exe&bc=1088000&productKey=3fgo4hykrcl66jxgrby774artxrb5y77&zTmp=1&variation=norefer  (359d8108766f16a0acbcfe4636e43e59)

22 / 68    (Adware)
http://files4.filedownload13.com/download/.../dl?bc=1176738&pid=Horizon&brand=xboxmb.com&country=BR&variation=chwebsite&cb=-1367321853&filename=horizon-setup.exe&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1  (23111ca4529bb3abb16118280a3cc7f5)

2 / 68      (false positives)
http://files4.filedownload13.com/download/.../dl?bc=1176738&pid=Horizon&brand=xboxmb.com&country=MX&variation=chwebsite&cb=1505464219&filename=horizon-setup.exe&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1  (wrar420.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1087988&c=D-APPS__subway&filename=subway_surfers.exe&productKey=wn2xvlkd3z2jiu3fgjsemugmsb5f7c3s&zTmp=1&variation=norefer  (b41364140d73b6ba2db9017160767b5c)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=Garrys Mod&filename=Garrys Mod.exe&productKey=sfjtzqd3qo7heqittlp254ltrhiwgyj4&zTmp=1&variation=norefer  (garrys mod.exe)

1 / 68      (Adware)
http://files4.filedownload13.com/download/.../dl?bc=608&pid=TR&brand=openoffice.fm&s=SEO&c=UK_OpenOfficefm_Suite_PM&country=GB&variation=chwebsite&cb=-157985924&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1  (openofficesuite-setup.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=LEGO Worlds&filename=LEGO Worlds.exe&productKey=hetvgsqejdrdj3lzkbufhagkycno2mj6&zTmp=1&variation=norefer  (lego worlds.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?c=HuniePop&filename=HuniePop_Setup.exe&bc=1088000&productKey=og3lue66ds43mv76ocs3sz5g7u4wtoan&zTmp=1&variation=norefer  (18bebc3635f28df52d3f4e4d55379851)

25 / 68    (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=Stranded Deep&filename=Stranded Deep.exe&productKey=2wgjbhjpubh4yocyh7q2yxuyf7rndgv3&zTmp=1&variation=norefer  (stranded deep.exe)

24 / 68    (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=Subnautica&filename=Subnautica.exe&productKey=odx762etnj4d5t5wawoiwkyrvjyy62zf&zTmp=1&variation=norefer  (c5696694bc40df44fb57e9dd09b4d8c3)

22 / 68    (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=Team Fortress 2&filename=Team Fortress 2.exe&productKey=k5ljwcribnya5payujop2bjxmy3t3lmc&zTmp=1&variation=norefer  (team fortress 2.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1087988&c=Kik Messenger&filename=kik_messenger.exe&productKey=jhldgagi5y3gg3azyu43wlkutza7z62f&zTmp=1&variation=norefer  (a57630e0c057ad2753788faf45bfa74f)

1 / 68      (Adware)
http://files4.filedownload13.com/dl?bc=1192143&pid=TR&brand=openoffice.us.com&s=msn&c=Srch_US_OpenOffice_us_Suite_EM_Low_QS&country=US&variation=sametab&geo=&zTmp=1  (openofficesuite-setup.exe)

1 / 68      (PUP)
http://files4.filedownload13.com/dl?bc=1088000&c=Goat Simulator&filename=Goat Simulator.exe&productKey=rkavx5nh3zuvlliwyb4yftgjodynbmud&zTmp=1&variation=norefer  (goat simulator.exe)

17 / 68    (Adware)
http://files4.filedownload13.com/download/.../dl?bc=1176738&pid=Horizon&brand=xboxmb.com&country=US&variation=chwebsite&cb=1719693534&filename=horizon-setup.exe&osName=Windows&osVersion=Vista&browserName=IE&browserVersion=9&zTmp=1  (d62867730f9bf6eb3922e9d0a69a7950)

The following 261 files have been seen to comunicate with files4.filedownload13.com in live environments.

TCP » 104.112.235.19:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.51.126.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.9.18:80
browser.exe (Browser)

TCP » 184.51.126.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.56:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
messengertime.exe

TCP » 184.51.126.18:80
pi1vgjqw.exe

TCP » 23.15.7.97:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.83:443
whatsapptime.exe

TCP » 184.51.126.83:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 184.51.126.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.9.19:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.50:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

 
Latest 20 of 305 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.