home

nfs.ezdownloadpro.info

Rafael Leviev

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Munich, Bayern within Germany which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Rafael Leviev who is located in Shfela, Israel.
Registrar:
1API GmbH

Server location:
Bayern, Germany (DE)

ASN:
AS61969 TEAMINTERNET-AS Team Internet AG,DE

Root domain:
ezdownloadpro.info

Whois:
1 ezdownloadpro.info record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

The domain nfs.ezdownloadpro.info has been seen to resolve to the following 2 IP addresses.

185.53.177.6
July 12, 2016

185.53.177.10
May 21, 2016

File downloads found at URLs served by nfs.ezdownloadpro.info.

1 / 68      (Malware)
http://nfs.ezdownloadpro.info/hp/?q=dzlBDzMGYEzp345678Ud/RRMTqIpdiqPS65meerlVuDZ5hkUtQctvPrrckNGlgQ0ap402d77ka2GIKqiKU7pcTN6IuY8SwYHnPU6q2ZQhFmAW97poSoAdiE086XgZ0VnBYCbiVQ70sKxOnXcO5cEo4p3rby n4T8kJ 2DtQ4Ly5L4AtVtdf8q19Eg0q18VQgS1PNv1gSU1Xz51k530AtRwyoSJwZ8v92tB04U6PlNF1 hvJIOzYs4Z7yoIT67I/MKVebmMItevlW53UUjAIwQSMNsYo3qVMWpMkdDbe1vvHuoXz0VX8nLMHCz f1BD47alVpU6PCD1LHh KVUH1/9ty ehTYpVv3feAKvIuUKc1SJ5C sgjPhpkALHsT06Y5qHthEl6BeW1VWdFPgDpxEermM5mbKhTWAhx0QSK/ArCuqW1GxrWTbrH/.../MGh6ReuO4yx3ehmYtdRSunzo2XR2wSO7f8mL51R20txSG&external_id=1425110745162515337&uuid=HMm42tlkG0oxh57PNHrN7otMdNrGrvZaAxZPHfTIIAqQy3NQl19rm8vQ8b8StFzz6QU5vJjJjWGuc4nnPevQD5rCFfFnygbtAdOfcDYX2ixFQPTdbHJZPZHpFVhk6uJPUpgkvqkc8b3ItL0sOtriOoBOfS5T8EtIjPK9J3PcpiEl0rWdjb6fNNtHqNatgJAxNHt24UTqVKnthuKZDal5yDGgMMv8WkHFUHIpJWZyWTyMPtROrqmqcsbUsdwOxmcchqUeXYUQ6agIFavtOb4JPlrEL4XhZE6LQ2mobd1vXkNNG2WLacUpEWz11RaJvRWVqEPPwqKspzdLbcmHoo  (picsart.exe)

1 / 68      (Malware)
http://nfs.ezdownloadpro.info/hp/?q=JVg8/ruruN0vAztvqo1LR4HxWhsA/yTyBup 7HsX DyHyMrLcEW7S0FdWyEMtLRDY5Q/6dcZNJ5jJjpFNewdAiBw9rewkdZsOhh3TBAwbirlIxdPFa3TY0MET4cABo2h0 HAYZyA8P7Ki3ryxEbqcnsWH7XC1EB2r7 sQhifvu2x K6qeWsLxTHRxr rlep7GqF4jNEbIbYiWnGBFR4FPFE0WAhyeK7VHLJXthxKlIvcUmQaNWp4Kq09AUFHO8HGPD3z8JxlrdsKInJGHMUiyA9AYABMFJxaK5St uTwh762Kgmg9j7Og 3SNXUZTfDfaZlWxDljDms3t3zwDqfxhY3NuAgmOayqZ HfYBHQSflCG429BXEtgmjr8uAVIvEV9r4YOnyW4taj7uP0uPTL35nOFQqbjAo/ p/2WLN7F2gHp/G13Mro4beOJm4FyPP4g/85ytsUGMe5lEix2v4NbKDsfuDjnvuuFWNj4jbaDj1ECfl91SndWp7lYfAZvWHsliBo//0gbn92aTR7SL5XIgpqwpVNm5OC2b2UlHGHu7cRPxvnODi4YRxdj5P9HSoj6gw0esATGXnhAwrEBuC9EnF9 hGChX7tLSH9BangaIZ25O26xlGzNDwHjHv1TkyoiKDd7b92kAvUykOWjGB8rkjvAhqdrz0ROFIbfl5YRf VVKP7dmfhbOh1B3K/s7LeZ5cwDb3eMBIcTPg/2 R2E5rRKsTnAjc0iZJwapjFZEkyMZzKCrk/3lreBHWYIu3t2z C3Yjf3/KlHeSRr0FDDAHC5bdMNQKz6V/qUwWir24eGQcYBUvrUaNgJj36AdkV2pLdUuQcCC4zmPA60zvHa5/ureSr1iQt6pVhbCDl8LVqOSp/.../vkDiuo6fSh MvwY9plj8giQbscUmRBoWsxm MtG2 Cf9YHgoBwCv7MEo8y1JZTtnxMGPhP  (danny romero - 18 aos ft. juan magan.mp3.exe)

URL:
http://nfs.ezdownloadpro.info/

Title:
“ezdownloadpro.info”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.