» www.askdownload.com
Overview
Analysis
IPs Addresses (9)
Downloads (12)
Network (150)
Website Detail
Related Domains (30)

www.askdownload.com

Amonetize ltd. (via a Proxy Registrant)

Domain Information

The domain www.askdownload.com is registered by proxy through Moniker Online Services and was originally registered in July of 2013. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Sankt Ingbert, Saarland within Germany which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Amonetize ltd. who is located in Raanana, Alberta in Israel.

Registrant:

Moniker Privacy Services on behalf of Amonetize ltd.

Registrar:

Moniker Online Services

Server location:

Saarland, Germany (DE)

Create date:

Wednesday, July 31, 2013

Expires date:

Friday, July 31, 2015

Updated date:

Friday, August 1, 2014

ASN:

AS196763 KEY-SYSTEMS-AS Key-Systems GmbH,DE

Root domain:

askdownload.com

Whois:

3 askdownload.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.Amonetizeltd.a, PUP.Installer.Amonetizeltd.F, PUP.Installer.Amonetizeltd.b, PUP.Installer.Amonetizeltd.g, PUP.Amonetize.Bundler (M)

100.00%

Malwarebytes

PUP.Optional.InstallMonetizer, PUP.Optional.Amonetize.A

90.00%

Dr.Web

Adware.Downware.1833, Adware.Downware.1528, Adware.Downware.2467, Adware.Downware.2453

90.00%

VIPRE Antivirus

Amonetize

90.00%

Avira AntiVirus

Adware/Lollipop.1.5, ADWARE/Adware.Gen2

90.00%

ESET NOD32

Win32/Amonetize.AD (variant), Win32/Amonetize (variant), Win32/Amonetize.AJ (variant)

90.00%

Sophos

Amonetize

80.00%

Trend Micro House Call

TROJ_GEN.F47V0123, TROJ_GEN.F47V1029, TROJ_GEN.F47V0326, TROJ_GEN.F47V1028, TROJ_GEN.F47V1027

70.00%

AhnLab V3 Security

PUP/Win32.Amonetiz

70.00%

avast!

Win32:Amonetize-E [PUP], Win32:Amonetize-AM [PUP], Win32:Amonetize-AO [PUP], Win32:Amonetize-Y [PUP], Win32:Amonetize-Q [PUP]

60.00%

Comodo Security

ApplicUnwnt

60.00%

McAfee

Adware-Amonetize!44C5B272E1C9, Adware-Amonetize!3C3462582E63, Artemis!142ED8DC0D34, Artemis!4C0192A7A437, Artemis!F6F8FBFD09B8

50.00%

Fortinet FortiGate

Riskware/Amonetize, Adware/Amonetize

50.00%

Kaspersky

not-a-virus:HEUR:AdWare.Win32.Amonetize

50.00%

IKARUS anti.virus

not-a-virus:Downloader.Win32.Agent

40.00%

The domain www.askdownload.com has been seen to resolve to the following 9 IP addresses.

184.168.221.57

ip-184-168-221-57.ip.secureserver.net

August 26, 2016

109.234.109.76

ns1.expirationwarning.net

September 5, 2014

107.20.210.63

ec2-107-20-210-63.compute-1.amazonaws.com

June 26, 2014

23.21.228.251

ec2-23-21-228-251.compute-1.amazonaws.com

June 26, 2014

50.17.209.45

ec2-50-17-209-45.compute-1.amazonaws.com

June 26, 2014

50.17.206.16

ec2-50-17-206-16.compute-1.amazonaws.com

June 26, 2014

54.235.68.127

ec2-54-235-68-127.compute-1.amazonaws.com

April 11, 2014

107.21.115.114

ec2-107-21-115-114.compute-1.amazonaws.com

April 11, 2014

54.225.132.130

ec2-54-225-132-130.compute-1.amazonaws.com

March 14, 2014

File downloads found at URLs served by www.askdownload.com.

1 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.86&prefix=VLCMediaPlayerSetup&campid=3715&instid[appname]=VLC Media Player&instid[appsetupurl]=http://videolan.c3sl.ufpr.br/vlc/2.0.8/win32/vlc-2.0.8-win32.exe&instid[appimageurl]=http://s3.amazonaws.com/free-sw/carriers/.../player.html&__cookie=__utma=180958881.1588006450.1382906866.1382906866.1382906866.1 (flashplayersetup__2340_i111561522.exe)

13 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.55&prefix=7Zip&campid=3365&capp=s7zip&ti1=[clickID]&iaff1=9999 (flashplayer__2570_i113664947_il8.exe)

12 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.89&prefix=FlashPlayerSetup&campid=4072&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=31346329251383477576&iaff1=10117 (flashplayer__3322_i118540554_il83.exe)

8 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.89&prefix=FlashPlayerSetup&campid=3322&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=0047818455579421378&iaff1=10036 (flashplayer__3322_i111653789_il83.exe)

8 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.89&prefix=FlashPlayerSetup&campid=3322&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=0024680405573140310&iaff1=10036 (flashplayer__3322_i111653789_il83.exe)

18 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.86&prefix=FlashPlayerSetup&campid=4121&capp=FlashPlayer&ti1=w5bPDf9Aydw9obTUzw3J2ybOk9zghP9v-nrqDgHamf6uj45DGnX4J7hFO_-T0vkhT8SEh-6kMxj_S1OPqW7uWFrTrWFXeDnAva-8Y_a-J5v8yzDDUplIpFASzx3J0Oe9ozn5JAcbchu6G4HOShIOw8UQlBQ7dxnc4mGkq0NSQG1splNxZbABjPXeRUjRXaveK2L50SjA9WEn5tnUQWCA16YLTTGUptnXrjxs59Y7wXrWlSmb1a_xCfqamjVwhDAu44LKrTjI0AKgtK99V2A7zQsGEO7LUObv16J5tACCC5AwKmNYtx7q-oobg3ZFYssm0u6Uxy2XOaUy_VCRQvnHBHZge6Z7bxAYAfkwYHQddGQUXbBvDGX6EdpRoUtJMg&iaff1=10118 (flashplayersetup__4121_i112784834_il56.exe)

18 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.55&prefix=7Zip&campid=3163&capp=s7zip&ti1=[clickID]&iaff1=9999 (tvappsetup__2327_i113260380_il12.exe)

8 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.89&prefix=FlashPlayerSetup&campid=3322&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=0025099635576253957&iaff1=10036 (flashplayer__3322_i111653789_il83.exe)

10 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.8.19&prefix=FlashPlayerSetup&campid=3650&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=694--935--1383149816.6555--93e9fd5e8e&iaff1=10009 (setup.exe)

12 / 68 (Adware)

17 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.8.21&prefix=FlashPlayerSetup&campid=3784&capp=FlashPlayer&iaff1=10073 (setup.exe)

13 / 68 (Adware)

http://www.askdownload.com/download.php?version=1.1.5.55&prefix=VLCMediaPlayer&campid=3954&capp=MediaPlayer&t1=scaricavlc&vtgt=1390665342393&vtgh=nmlEuyFV_VuKGrmvwrDwsN8eZUm9hiVLwUW19oJERlzCk2hzSNWuSKCgpZdpKsJjcsRdd_w9Ah3AMbsfsOINOkdlQEr9gD575JH0AbDPqpZTaB8ELbz60C2GiTH7cloS_Nq9yrcpKfKEs6vS2qVe8vZCCa3pyGgVMNFJeVaV15rNzhWbyv-ZCWI3l3Rn0NFD4AXU1ttAP6PqO4nh2lEwQ5deIx4R-WCNonntxZQng8Mzp-WY8aAJ8uA7vA9z1GVWQ-chA5HqINnaopem0rd71tzRT8xPfnAKFuSqpFPvDOA8lGhoo3FBpMN5PJ3Sd90wiseLIzMuYuctdk4xxbmslw,, (flashplayer__4369_i291733017_il1.exe)

The following 150 files have been seen to comunicate with www.askdownload.com in live environments.

TCP » 184.168.221.57:80

googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.57:80

b24b7bff-b581-42e4-8251-c966179c93b4-5.exe (Ge-Force by iWebar)

TCP » 184.168.221.57:80

b24b7bff-b581-42e4-8251-c966179c93b4-11.exe (Ge-Force by iWebar)

TCP » 184.168.221.57:80

ge-force-codedownloader.exe (Ge-Force by iWebar)

TCP » 184.168.221.57:80

eba6b5e7-9d84-47d7-a4d8-77d7fae44b86-4.exe (iWebar)

TCP » 184.168.221.57:80

totalplushd-3.1v24.11-codedownloader.exe (TotalPlusHD-3.1V24.11 by HDPlus-3.1TotalV24.11)

TCP » 184.168.221.57:80

d1065db2-fe12-4865-827f-f2b3ac639704-5.exe (I - Cinema by DiscountFrenzy)

TCP » 184.168.221.57:80

889a7ab4-2675-4805-b71f-27d185d7e7e7-5.exe (Browser+ProApp_version10 by Browser)

TCP » 184.168.221.57:80

d1065db2-fe12-4865-827f-f2b3ac639704-11.exe (I - Cinema by DiscountFrenzy)

TCP » 184.168.221.57:80

iwebar-codedownloader.exe (iWebar)

TCP » 184.168.221.57:80

1eb5f2f6-cb5c-4f61-b907-b18e2ae1a6e1-11.exe (Internet Speed Checker by Speedchecker)

TCP » 184.168.221.57:80

41e99822-ab50-48a8-a0c4-26746ec24416-7.exe (TotalPlusHD-3.1V20.11 by HDPlus-3.1TotalV20.11)

TCP » 184.168.221.57:80

63b11c5e-b05e-47f0-9829-ae8fdd247b03-7.exe (MediaPlayersvideos 1.1 by Enter)

TCP » 184.168.221.57:80

bf6ab4fb-a052-4757-8d0a-575b27c0b513-7.exe (App Lid by Lid)

TCP » 184.168.221.57:80

046edf9a-be87-46ab-b1a8-cf6afa0d6f3b-5.exe (CinemaPro 1.5V18.11 by Cinema ProV18.11)

TCP » 184.168.221.57:80

d1065db2-fe12-4865-827f-f2b3ac639704-4.exe (I - Cinema by DiscountFrenzy)

TCP » 184.168.221.57:80

889a7ab4-2675-4805-b71f-27d185d7e7e7-11.exe (Browser+ProApp_version10 by Browser)

TCP » 184.168.221.57:80

TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.168.221.57:80

gohd-codedownloader.exe (GoHD by InstallMoon)

TCP » 184.168.221.57:80

browser.exe (Browser)

Latest 20 of 153 files

URL:

http://www.askdownload.com/

Title:

“ERRP | Expired Registration Recovery Policy”

Description:

“Expired Registration Recovery Policy”

Web server:

nginx/1.1.19 (PHP/5.3.10-1ubuntu3.8)

Related Domains

reliabletrusteddownloads.com

easyfiledownloads.net

30 of 30 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.