» savefrom.net
Overview
Analysis
IPs Addresses (3)
Downloads (59)
Network (51)
Subdomains (14)
Website Detail
Statistics

savefrom.net

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain savefrom.net is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.

Registrant:

Domains By Proxy, LLC

Registrar:

GODADDY.COM, LLC

Server location:

England, United Kingdom (GB)

Create date:

Wednesday, March 12, 2008

Expires date:

Friday, March 12, 2021

Updated date:

Sunday, March 13, 2016

ASN:

AS13213 HSI-EUROPE Hosting Services Inc,GB

Whois:

3 savefrom.net records

Scanner detections:

Detections (65% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.SaveForm.Optional.Meta (L), PUP.SaveForm.Optional.Installer.Meta (L)

100.00%

Trend Micro House Call

Suspicious_GEN.F47V0622, Suspicious_GEN.F47V0628

15.38%

The domain savefrom.net has been seen to resolve to the following 3 IP addresses.

146.185.29.109

scenery.moonshineenergy.net

December 22, 2013

146.185.29.13

uk.node.quickweb.co.nz

December 22, 2013

5.63.150.180

053f96b4.rdns.100tb.com

December 22, 2013

File downloads found at URLs served by savefrom.net.

0 / 68

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Setup.exe (tmpa033.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-93f42aa7a8.exe (savefromnethelper-web-794054901b.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-a113cc9be3.exe (savefromnethelper-web-794054901b.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-20cf92264c.exe (savefromnethelper-web-f0a98c58ff.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-e0423cb821.exe (savefromnethelper-web-916596b955.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-3fc61dba1b.exe (savefromnethelper-web-f0a98c58ff.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-073ba4b027-307.exe (savefromnethelper-web-c1ca87ae64.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-04a10cc1cf.exe (savefromnethelper-web-6e428ee390.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-c73c382458.exe (savefromnethelper-web-218b6f8047.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-dc8b40142d-307.exe (savefromnethelper-web-f5b8ad890e-307.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-a0446e672f-307.exe (savefromnethelper-web-95b2c0d211.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-7e1f84b126.exe (savefromnethelper-web-794054901b.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-96cc9203a7.exe (savefromnethelper-web-6e428ee390.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-3f8dcbdbaf.exe (savefromnethelper-web-916596b955.exe)

0 / 68

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-Inst-310.exe (savefromnethelper-web-inst.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-b17666e155.exe (savefromnethelper-web-95979d9236.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-dcc87d5387.exe (savefromnethelper-web-6e428ee390.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-4f56176124.exe (savefromnethelper-web-f0a98c58ff.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-4533dbbd53.exe (savefromnethelper-web-916596b955.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-904b033e04-307.exe (savefromnethelper-web-95979d9236.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-351df963a7.exe (savefromnethelper-web-794054901b.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-acc8b1c396.exe (0de9f7a2805fbce667be50ea114aec4c)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-7526136c7b.exe (savefromnethelper-web-916596b955.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-c58a508736.exe (savefromnethelper-web-916596b955.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-3c44664f19.exe (savefromnethelper-web-916596b955.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-be1065103f.exe (savefromnethelper-web-d8257d41cf-307.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-03e3380dee.exe (savefromnethelper-web-f0a98c58ff.exe)

1 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-64bf556749.exe (savefromnethelper-web-916596b955.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-08a135b862.exe (savefromnethelper-web-6e428ee390.exe)

2 / 68 (PUP)

http://savefrom.net/files/extensions/.../SaveFromNetHelper-Web-e39bb715ee.exe (savefromnethelper-web-794054901b.exe)

Latest 30 of 59 download URLs

The following 51 files have been seen to comunicate with savefrom.net in live environments.

TCP » 5.63.150.180:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.109:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.109:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.13:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.63.150.180:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.109:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.13:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.63.150.180:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.13:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.63.150.180:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.63.150.180:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.13:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 146.185.29.109:80

citrio.exe (Citrio by CatalinaGroup)

TCP » 146.185.29.109:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.13:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.109:80

bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 146.185.29.109:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 146.185.29.109:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 5.63.150.180:80

injector.txt (Windows by Microsoft)

TCP » 146.185.29.13:80

browser.exe (speed browser by Fast Applications)

Latest 20 of 98 files

Subdomains

August 10, 2014

download.savefrom.net

June 3, 2016

April 4, 2016

June 3, 2016

May 19, 2016

June 18, 2016

March 4, 2016

September 1, 2015

November 9, 2015

November 9, 2015

October 26, 2015

November 7, 2015

May 22, 2016

November 19, 2015

URL:

http://savefrom.net/

Google Analytics:

UA-7055055

Title:

“Free Online YouTube Downloader: Download YouTube Videos, Facebook and many others!”

Description:

“Free Online service to Download YouTube videos at one click! The best YouTube Downloader supporting fast and easy vimeo, Facebook and Dailymotion video Download and much more!”

SSL certificate subject:

CN=*.savefrom.net, OU=PremiumSSL Wildcard, O="Magicbit, Inc", STREET="901 N. Pitt Street, Suite 325", L=Alexandria, S=VA, PostalCode=22314, C=US

SSL certificate issuer:

CN=COMODO RSA Organization Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

nginx (PHP/5.3.23)

Facebook:

Likes: 45,270

Shares: 196,435

Comments: 16,949

Statistics above are for the previous month of March 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.