home

getdl.net

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain getdl.net is registered by proxy through DOMAINSTREETDIRECT.COM LLC and was originally registered in April of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
DOMAINSTREETDIRECT.COM LLC

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Sunday, April 26, 2015

Expires date:
Tuesday, April 26, 2016

Updated date:
Sunday, April 26, 2015

Whois:
4 getdl.net records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, Win32.Generic, PUP.Amonetize.ShetefSo.Bundler (M), Adware.Amonetize.Installer.Installer.Meta (M)
86.96%

ESET NOD32
Win32/Amonetize.AJ (variant), Win32/Amonetize.AO (variant), Win32/Amonetize.AS (variant), Win32/Amonetize.AS potentially unwanted (variant)
71.74%

avast!
Win32:Amonetize-Y [PUP], Win32:Amonetize-AX [PUP], Win32:Amonetize-BJ [PUP], Win32:Amonetize-AM [PUP]
69.57%

Malwarebytes
PUP.Optional.Amonetize.A, PUP.Optional.Monetizer
67.39%

Sophos
Amonetize
67.39%

Avira AntiVirus
ADWARE/Adware.Gen2
65.22%

AhnLab V3 Security
PUP/Win32.Amonetiz
65.22%

Baidu Antivirus
Adware.Win32.Amonetize
65.22%

McAfee
Artemis!4CF8DB7F08F1, Artemis!74705E1F9812, Artemis!EF81A9F21DE8, Artemis!08566C143686, Artemis!E552A1A6AD82, Artemis!72CC702E1DA0, Artemis!B113DEE0FBFE, Artemis!3A6D19FAE162, Artemis!8842906CC544, Artemis!ADF55A0D8DF6, Artemis!18BFA286528A, Artemis!9F60752A128B, Artemis!E351B2BC6EDA
60.87%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
58.70%

Trend Micro House Call
TROJ_GEN.F47V0326, TROJ_GEN.F47V0424, TROJ_GEN.F47V0504, TROJ_GEN.F47V0429, TROJ_GEN.F47V0508, TROJ_GEN.F47V0513, TROJ_GEN.F47V0501
50.00%

Qihoo 360 Security
Win32/Virus.Adware.932, Win32/Application.fe5, Win32/Virus.Adware.389
50.00%

VIPRE Antivirus
Trojan.Win32.Generic, Amonetize
47.83%

Fortinet FortiGate
Riskware/Amonetize
45.65%

Dr.Web
Adware.Downware.3033, Adware.Downware.3547, Adware.Downware.3925, Adware.Downware.3218, Adware.Downware.3501, Adware.Downware.3081
43.48%

The domain getdl.net has been seen to resolve to the following 7 IP addresses.

5.39.99.49
June 3, 2016

5.39.99.51
March 4, 2016

5.39.99.50
March 1, 2016

5.39.99.52
January 4, 2016

167.114.156.214
ns513839.ip-167-114-156.net
November 12, 2015

92.242.140.21
unallocated.barefruit.co.uk
August 1, 2014

78.140.137.161
April 11, 2014

File downloads found at URLs served by getdl.net.

1 / 68      (Malware)
http://getdl.net/?id=t1481&nor=1&sub=&name=Flash Player&url=  (downloadsetup__7818_i648650673_il4045951.exe)

1 / 68      (PUP)
http://getdl.net/link/?ref=t253d.21542-BNC.0.008.517df67ff18&prefix=Download.Setup&url=name://Download.Setup&country=UA  (download.setup_s.exe)

3 / 68      (PUP)
http://getdl.net/?id=ta6b&sub=HeberTech&name=Telefunken-6922-Datasheet&url=  (telefunken.6922.datasheet__2299_i520135466_il1041981.exe)

2 / 68      (PUP)
http://getdl.net/?id=ta6b&sub=HeberTech&name=RCA-6922-Datasheet&url=  (rca.6922.datasheet__2299_i520136347_il1042134.exe)

13 / 68    (PUP)
http://getdl.net/.../?ref=p191.dw3.0.download3.514c6c16a19&prefix=DownloadSetup&url=&ti2=6554028727&country=PK&name=  (downloadsetup__2299_i673183141_il11040093.exe)

13 / 68    (PUP)
http://getdl.net/.../?ref=p191.dw3.0.download3.514f235fd17&prefix=DownloadSetup&url=&ti2=6550755013&country=VN&name=  (downloadsetup__2299_i673183141_il11040093.exe)

27 / 68    (PUP)
http://getdl.net/.../?ref=p191.res.0.result.5240c096e00&prefix=DownloadSetup&url=&ti2=6919755246&country=IR&name=  (downloadsetup__2299_i718312742_il2761995.exe)

1 / 68      (Malware)
http://getdl.net/link/?ref=t198.0.0.results.5180945aa04&prefix=propsww2.cab&url=name://propsww2 cab&ti2=IVHm0596mrDTiAk9i9ZlkpoYFh_dpJ64jKmOSrbKmNm8&country=JM&name=propsww2 cab  (propsww2.cab__7818_i689249587_il14989344.exe)

1 / 68      (Malware)
http://getdl.net/.../?ref=p191.oc203.0.203.5164ae9c06&prefix=DownloadFileSetup&url=&ti2=6085318228&country=IN  (downloadfilesetup__2299_i618630681_il10572980.exe)

1 / 68      (Malware)
http://getdl.net/.../?ref=p191.dw3.0.download3.5668a6cd16&prefix=DownloadSetup&url=&ti2=6267215700&country=PL  (onerepublic counting stars counting stars__3818_il1301451.exe)

23 / 68    (PUP)
http://getdl.net/.../?ref=p191.oc203.0.203.51093efff13&prefix=DownloadFileSetup&url=&ti2=6399280922&country=VN  (eldeniz memmedov qoca daglar.mp3__4958_il5823903.exe)

1 / 68      (PUP)
http://getdl.net/.../?ref=p191.oc203.0.203.517faa39311&prefix=DownloadFileSetup&url=&ti2=6657220987&country=VN&name=  (downloadfilesetup__2299_i685327804_il14063540.exe)

1 / 68      (Adware)
http://getdl.net/?id=t4fdf&nor=1&sub=&name=&url=  (launcher__2299_i404674548_il1702.exe)

25 / 68    (PUP)
http://getdl.net/.../?ref=t290.15736-BN.0.100.430e82ff514&prefix=Download.Setup&url=&campid=7817&country=RU  (file.download__2299_i616405623_il9975439.exe)

28 / 68    (PUP)
http://getdl.net/.../?ref=t290.15736-BN.0.100.523bc91118&prefix=Download.Setup&url=&campid=7817&country=RU  (downloadfree downloader__3687_i623967984_il12065891.exe)

1 / 68      (PUP)
http://getdl.net/link/?ref=t253d.6274-BNC.0.008.517db89e616&prefix=Download.Setup&url=name://Download.Setup&country=RU  (download.setup_s.exe)

1 / 68      (PUP)
http://getdl.net/link/?ref=t290.15736-BN.0.008.515fad6b222&prefix=Download.Setup&url=name://Download.Setup&country=RU  (download.setup_s.exe)

1 / 68      (PUP)
http://getdl.net/link/?ref=t253d.15736-BNC.0.008.518564b7515&prefix=Download.Setup&url=name://Download.Setup&country=UA  (download.setup_s.exe)

28 / 68    (PUP)
http://getdl.net/.../?ref=p191.nw.0.new.52b1f34518&prefix=DownloadSetup&url=&ti2=6132939179&country=RU  (downloadfree downloader__3687_i623967984_il12065891.exe)

1 / 68      (Malware)
http://getdl.net/.../?ref=p191.dw3.0.download3.428cbccdb22&prefix=DownloadSetup&url=&version=1.1.5.26&campid=2299&ti2=6005604645  (counter strike global offensiv downloader__3687_i611008379_il8681353.exe)

11 / 68    (PUP)
http://getdl.net/.../?ref=p191.res.0.result.4299b76e201&prefix=DownloadSetup&url=&version=1.1.5.26&campid=2299&ti2=6011708212  (downloadsetup__2299_i611162456_il8716187.exe)

1 / 68      (PUP)
http://getdl.net/.../?ref=p7d0.0.0.1.52087bd2f14&prefix=BitMaster&url=&country=RU&name=BitMaster  (bitmaster_s.exe)

24 / 68    (PUP)
http://getdl.net/link/?ref=tc61b.0.0.results.523c8dc5010&prefix=maglite.dl.series&url=name://maglite dl series&ti2=&country=MX&name=maglite dl series  (file.download__2299_i715736078_il2327827.exe)

1 / 68      (Malware)
http://getdl.net/.../?ref=p191.dw3.0.download3.51e4519f11&prefix=DownloadSetup&url=&ti2=6090242360&country=IN  (downloadsetup__2299_i619220125_il10728251.exe)

14 / 68    (PUP)
http://getdl.net/.../?ref=p191.oc203.0.203.5178c7ddf20&prefix=DownloadFileSetup&url=&ti2=6672104805&country=VN&name=  (damnvid__6629_i686731454_il6534.exe)

1 / 68      (Malware)
http://getdl.net/link/?ref=t333d.nyraedawn.0.results.573fc9e801&prefix=Math.123.Department.Of.Mathe&url=http://www.math.csi.cuny.edu/Courses/.../MTH123.pdf&ti2=&country=US  (math.123.department.of.mathe__7818_i641331646_il1960017.exe)

11 / 68    (PUP)
http://getdl.net/link/?ref=t2b83.0.0.results.51863f35821&prefix=DownloadSetup&url=name://DownloadSetup&ti2=&country=US&name=DownloadSetup  (downloadsetup__7818_i692471031_il15733921.exe)

38 / 68    (PUP)
http://getdl.net/.../?ref=t290.37239-CU.0.100.427fbd59206&prefix=Download.Setup&url=&version=1.1.5.26&campid=7817  (ashampoo.anti.virus__2309_il321356.exe)

9 / 68      (PUP)
http://getdl.net/?id=te400&nor=1&sub=&name=Need For Speed Underground 2 Full indir - Tek Link&url=  (film sexi jadid khareji downloader__3687_i491041226_il6775715.exe)

10 / 68    (PUP)
http://getdl.net/.../?ref=p7d0.4en.0.1.57df336217&prefix=BitMaster&url=&country=AU  (pes.2014.türkçe.spiker__7933_il25463.exe)

 
Latest 30 of 63 download URLs

The following 266 files have been seen to comunicate with getdl.net in live environments.

TCP » 167.114.156.214:3333
webproxy.exe

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 167.114.156.214:80
setup_info.exe

TCP » 167.114.156.214:80
tencent.exe (by Tencent)

TCP » 167.114.156.214:80
rs.exe

TCP » 167.114.156.214:80
loader.exe (Updater by SOFTWARE AGILITY LIMITED)

TCP » 167.114.156.214:80
win.exe (SendStat Module)

TCP » 167.114.156.214:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 167.114.156.214:80
ProxyFinder.EXE (Proxy Finder Enterprise Edition Application)

TCP » 167.114.156.214:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 167.114.156.214:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 167.114.156.214:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 167.114.156.214:80
deamon.exe

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 167.114.156.214:80
run_css.exe

TCP » 167.114.156.214:1177
pirater facebook v1.0.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

 
Latest 20 of 271 files

URL:
http://getdl.net/

Title:
“getdl.net”

Web server:
nginx

Facebook:
Likes:  3
Shares:  1

Statistics above are for the previous month of March 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.