» files4.mirror1.info
Overview
Analysis
IPs Addresses (84)
Downloads (302)
Network (978)
Statistics

files4.mirror1.info

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain files4.mirror1.info is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the Akamai Technologies, Inc. network.

Registrant:

Domains By Proxy, LLC

Registrar:

GoDaddy.com, LLC

Server location:

Illinois, United States (US)

ASN:

AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:

mirror1.info

Whois:

3 mirror1.info records

Google Safe Browsing:

unwanted

Scanner detections:

Detections (83% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.DownloadAdmin.O, PUP.Tightrope.Download.Bundler (M), PUP.TomorrowSoftware.TRUSTEDI.Bundler (M), PUP.Tightrope.Blueis.Bundler (M), PUP.Fintech.Installer (M), PUP.Tightrope.Zoobam.Bundler (M), PUP.TomorrowSoftware (M), PUP.Tightrope (M), PUP (M)

97.50%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

2.50%

F-Secure

Application:W32/Generic.70053c248f!Online

2.50%

VIPRE Antivirus

Threat.4783369

2.50%

Dr.Web

Adware.Downware.557

2.50%

ESET NOD32

Win32/DownloadAdmin.G potentially unwanted application

2.50%

Clam AntiVirus

Win.Adware.Agent-6650

2.50%

Malwarebytes

PUP.Optional.DownloadAdmin

2.50%

NANO AntiVirus

Riskware.Win32.Downware.crgjbr

2.50%

Trend Micro House Call

HV_DOWNLOADADMIN_CG094603.RDXN

2.50%

Sophos

Download Admin

2.50%

F-Secure

Adware:W32/WebInstallBundle

2.50%

Avira AntiVirus

ADWARE/Adware.Gen9

2.50%

The domain files4.mirror1.info has been seen to resolve to the following 84 IP addresses.

23.219.88.106

a23-219-88-106.deploy.static.akamaitechnologies.com

September 17, 2016

23.219.88.50

a23-219-88-50.deploy.static.akamaitechnologies.com

September 17, 2016

23.219.88.8

a23-219-88-8.deploy.static.akamaitechnologies.com

September 17, 2016

23.219.88.145

a23-219-88-145.deploy.static.akamaitechnologies.com

September 16, 2016

23.219.88.113

a23-219-88-113.deploy.static.akamaitechnologies.com

September 16, 2016

23.219.88.200

a23-219-88-200.deploy.static.akamaitechnologies.com

September 15, 2016

23.219.88.159

a23-219-88-159.deploy.static.akamaitechnologies.com

September 15, 2016

23.15.8.33

a23-15-8-33.deploy.static.akamaitechnologies.com

July 5, 2016

23.15.8.89

a23-15-8-89.deploy.static.akamaitechnologies.com

July 5, 2016

104.96.220.219

a104-96-220-219.deploy.static.akamaitechnologies.com

June 21, 2016

104.96.220.225

a104-96-220-225.deploy.static.akamaitechnologies.com

June 21, 2016

104.96.220.209

a104-96-220-209.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.227

a104-96-220-227.deploy.static.akamaitechnologies.com

June 3, 2016

104.96.220.226

a104-96-220-226.deploy.static.akamaitechnologies.com

June 3, 2016

184.51.126.49

a184-51-126-49.deploy.static.akamaitechnologies.com

May 28, 2016

23.220.148.17

a23-220-148-17.deploy.static.akamaitechnologies.com

May 27, 2016

23.220.148.11

a23-220-148-11.deploy.static.akamaitechnologies.com

May 27, 2016

104.96.220.216

a104-96-220-216.deploy.static.akamaitechnologies.com

May 23, 2016

104.96.220.233

a104-96-220-233.deploy.static.akamaitechnologies.com

May 20, 2016

104.112.235.19

a104-112-235-19.deploy.static.akamaitechnologies.com

May 20, 2016

104.96.221.114

a104-96-221-114.deploy.static.akamaitechnologies.com

May 18, 2016

104.96.221.98

a104-96-221-98.deploy.static.akamaitechnologies.com

May 17, 2016

104.96.221.91

a104-96-221-91.deploy.static.akamaitechnologies.com

May 17, 2016

104.96.221.112

a104-96-221-112.deploy.static.akamaitechnologies.com

May 17, 2016

May 15, 2016

May 15, 2016

April 14, 2016

April 14, 2016

a23-15-9-18.deploy.static.akamaitechnologies.com

April 14, 2016

23.15.9.58

a23-15-9-58.deploy.static.akamaitechnologies.com

April 14, 2016

Showing 30 of 84 IP Addresses

File downloads found at URLs served by files4.mirror1.info.

0 / 68

http://files4.mirror1.info/download/.../dl?bc=1120062&pid=rockybytes&brand=es.rockybytes.com&country=AR&variation=chwebsite&cb=-273998442&filename=minecraft-setup.exe&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1 (83abb238259bb610d6747b5b4162624e)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=k5oe8r34hg6cukjlu28qnngbe1&c=ie&brand=gamenutt.com&pid=Kitara&aid=4721ISM&bc=616467&country=US&cb=-1632224308 (gamenutt-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1130798&pid=rockybytes&brand=programwardrobe.com&country=US&cb=1734280868&src_browser=ie&zTmp=1 (plantsvszombies-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?brand=tucows.com&pid=tucows&bc=792123&country=SA&cb=463839218 (hotspotshieldelite-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=kitara&c=kitara_mightymagoo&brand=mightymagoo.com&pid=Kitara&aid=2515Adsc&bc=463761&country=US&cb=1475573561 (mightymagoo-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=creeuf7vb5rkvdct1ecok6hcd5&c=ch&brand=mytopfreegames.com&pid=Kitara&aid=4721&bc=616473&country=US&cb=-928819511 (mytopfreegames-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=kitara&c=kitara_mytopfreegames&brand=mytopfreegames.com&pid=Kitara&aid=4721ISM&bc=463787&country=US&cb=-455959655 (mytopfreegames-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=sov1eu2stbfmq0glb6s6mtdr96&c=ie&brand=gamenutt.com&pid=Kitara&aid=1591&bc=616467&country=US&cb=-458542877 (gamenutt-setup.exe)

1 / 68 (PUP)

http://files4.mirror1.info/download/.../dl?bc=1193953&pid=rockybytes&brand=rockybytes.com&country=US&cb=493841782&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&src_browser=ie&zTmp=1&executable=1188155 (yanderesimulatorseptember1st-setup.exe)

11 / 68 (Adware)

http://files4.mirror1.info/download?s=kitara&c=kitara_gamenutt&brand=gamenutt.com&pid=Kitara&aid=4491&bc=463771&country=US&cb=1852730217 (gamenutt-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=kitara&c=kitara_greeneggsham&brand=greengamesandham.com&pid=Kitara&aid=ADNXCPA&bc=463763&country=US&cb=-1685722881 (greengamesham-setup.exe)

0 / 68

http://files4.mirror1.info/download/.../dl?bc=1179310&pid=rockybytes&brand=programwardrobe.com&country=US&cb=177521907&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&src_browser=ie&zTmp=1 (garrysmod132-setup.exe)

1 / 68 (PUP)

http://files4.mirror1.info/download/.../dl?bc=1120162&pid=rockybytes&brand=es.rockybytes.com&country=CL&cb=-118730587&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1&executable=1188155 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=s8krc69ao91shrahj0la4g8ea7&c=ch&brand=playpickle.com&pid=Kitara&aid=4721ISM&bc=616465&country=US&cb=1762200712 (playpickle-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=njo7fcp402a82e4ge9u6rl93u3&c=ch&brand=greengamesandham.com&pid=Kitara&aid=4721ISM&bc=616463&country=US&cb=-369363392 (greengamesham-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?v.id=pg3&variation=graphical&brand=playsides.com&pid=secco&bc=911579&country=BR&cb=-202098198 (playsidescom-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?brand=okozo.com&pid=okozo&bc=452963&country=PL&cb=1820498377 (okozodesktop-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1176452&pid=rockybytes&brand=programwardrobe.com&country=US&variation=chwebsite&src_browser=ie&cb=-1644172029&filename=minecraft183-setup.exe&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1 (0a430cc42e35a4ce42a6a68ba1dee7eb)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?brand=rockybytes.com&pid=rockybytes&bc=1081776&country=US&cb=2043584127&zTmp=1 (minecraft-setup.exe)

0 / 68

http://files4.mirror1.info/download/.../dl?bc=1120062&pid=rockybytes&brand=es.rockybytes.com&country=PE&variation=chwebsite&cb=-1245307345&filename=minecraft-setup.exe&osName=Windows&osVersion=8&browserName=IE&browserVersion=10&zTmp=1 (52ec0eb0d2e7c9b88750c1bb83844573)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=kitara&c=kitara_greeneggsham&brand=greengamesandham.com&pid=Kitara&aid=ADNXReX2&bc=463763&country=US&cb=1973049879 (greengamesham-setup.exe)

2 / 68 (false positives)

http://files4.mirror1.info/download/.../dl?bc=1193953&pid=rockybytes&brand=rockybytes.com&country=US&cb=-528525242&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&src_browser=ie&zTmp=1&executable=1188155 (wrar420.exe)

2 / 68 (false positives)

http://files4.mirror1.info/download/.../dl?bc=1181186&pid=rockybytes&brand=es.rockybytes.com&country=ES&variation=chwebsite&cb=-493934288&filename=minecraft-setup.exe&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1 (wrar420.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1129586&pid=rockybytes&brand=programwardrobe.com&country=US&cb=-1024289106&osName=Windows&osVersion=7&browserName=Chrome&browserVersion=12&src_browser=ch&zTmp=1 (paintnet-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1165162&pid=rockybytes&brand=programwardrobe.com&country=US&cb=1211643794&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&src_browser=ie&zTmp=1 (minecraft181-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1114208&pid=rockybytes&brand=es.rockybytes.com&country=MX&variation=chwebsite&cb=-417673837&filename=cheatengine-setup.exe&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1&executable=1188159 (d0dedb7592067c5145e879d0a9fd888d)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=t43pgdnbt7iihbi2bvjsvukop5&c=ch&brand=mightymagoo.com&pid=Kitara&aid=5984MMPPL&bc=616461&country=US&cb=-1093722937 (hunger games.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1128698&pid=rockybytes&brand=programwardrobe.com&country=GB&variation=chwebsite&src_browser=ie&cb=818465233&filename=terraria-setup.exe&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1&executable=1188167 (996375266f6929845d35b007741bb7a7)

1 / 68 (Adware)

http://files4.mirror1.info/download/.../dl?bc=1129586&pid=rockybytes&brand=programwardrobe.com&country=US&cb=-1892463643&osName=Windows&osVersion=7&browserName=Chrome&browserVersion=12&src_browser=ch&zTmp=1 (paintnet-setup.exe)

1 / 68 (Adware)

http://files4.mirror1.info/download?s=kitara&c=kitara_greeneggsham&brand=greengamesandham.com&pid=Kitara&aid=6214&bc=463763&country=US&cb=-1846312709 (greengamesham-setup.exe)

Latest 30 of 302 download URLs

The following 978 files have been seen to comunicate with files4.mirror1.info in live environments.

TCP » 104.112.235.19:80

TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.51.126.50:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.80:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.104:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.219.88.200:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443

kometa.exe (Kometa by Kometa Authors)

TCP » 184.51.126.49:80

updateadmin.exe

TCP » 184.51.126.83:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.80:80

plugin.exe

TCP » 184.51.126.104:80

plugin.exe

TCP » 184.51.126.105:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.49:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.219.88.8:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.80:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.105:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.105:443

citrio.exe (Citrio by CatalinaGroup)

TCP » 184.51.126.83:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.90:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.9.18:80

browser.exe (Browser)

Latest 20 of 1,114 files

Facebook:

Shares: 1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.