» www.ftdownloader.net
Overview
Analysis
IPs Addresses (9)
Downloads (36)
Network (215)
Website Detail
Related Domains (618)

www.ftdownloader.net

N/A

Domain Information

The domain www.ftdownloader.net registered by N/A was initially registered in February of 2016 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.

Registrant:

N/A

Registrar:

PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:

Dublin City, Ireland (IE)

Create date:

Monday, February 15, 2016

Expires date:

Wednesday, February 15, 2017

Updated date:

Monday, February 15, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

ftdownloader.net

Whois:

3 ftdownloader.net records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.CoolMirageltd.t, PUP.HARASANPRAPAPON.X, PUP.Installer.CoolMirage.N, PUP.HARASANPRAPAPON.BB, PUP.CoolMirage.e, PUP.CoolMirage.BB, PUP.CoolMirageltd.G, PUP.TerraFirmaInternetConsulting.N, PUP.CoolMirage.Installer (M), PUP.TanjaMatkovic.Installer (M), PUP.TerraFir.Installer (M), PUP.Crossrider.HARASANP.Installer (M), PUP (M)

100.00%

Malwarebytes

PUP.Adware.Agent, PUP.Optional.OneClickDownloader.A

36.67%

VIPRE Antivirus

Iminent, BubbleDock, CoolMirage Ltd, Conduit, Threat.4784938

33.33%

Dr.Web

Adware.Downware.794, Adware.Downware.1263, Adware.Yontoo.11, Threat.Undefined, Adware.Yontoo.4

26.67%

Sophos

FT Downloader, CoolMirage, 1 Click Downloader

23.33%

McAfee

Adware-SweetIM, Artemis!67F3A421F22D, Artemis!98D9B6ED82E9, Artemis!9D2FE1D54B93

20.00%

Qihoo 360 Security

Win32/Virus.Adware.47b, Malware.QVM06.Gen

16.67%

Panda Antivirus

PUP/MultiToolbar.A

13.33%

Trend Micro House Call

TROJ_GEN.F47V0416, TROJ_GEN.F47V0412, TROJ_GEN.F47V0315, TROJ_GEN.F47V0404

13.33%

avast!

NSIS:Oneclick-AA [PUP], Downloader-TPG [PUP], Downloader-UHI [PUP]

10.00%

NANO AntiVirus

Trojan.Script.Downware.cujzax

10.00%

SUPERAntiSpyware

Trojan.Agent/Gen-Downloader

10.00%

Avira AntiVirus

APPL/CoolMirage.Gen6

10.00%

Comodo Security

Application.Win32.MCool.A

6.67%

G Data

NSIS.Adware.OneClickDownloader

6.67%

The domain www.ftdownloader.net has been seen to resolve to the following 9 IP addresses.

141.8.225.48

August 25, 2016

54.72.9.51

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com

June 26, 2016

185.53.178.13

April 11, 2016

54.246.121.152

ec2-54-246-121-152.eu-west-1.compute.amazonaws.com

November 10, 2015

54.246.120.161

ec2-54-246-120-161.eu-west-1.compute.amazonaws.com

June 30, 2015

184.169.157.32

ec2-184-169-157-32.us-west-1.compute.amazonaws.com

February 10, 2015

50.18.168.176

ec2-50-18-168-176.us-west-1.compute.amazonaws.com

November 18, 2014

54.241.253.59

ec2-54-241-253-59.us-west-1.compute.amazonaws.com

September 21, 2014

184.169.175.49

ec2-184-169-175-49.us-west-1.compute.amazonaws.com

May 1, 2014

File downloads found at URLs served by www.ftdownloader.net.

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://www.xvideos.com/.../jenny_rivera_video_porno&name=Jenny Rivera video porno&pub=ftdown3&sp=1 (jenny_rivera_video_porno.exe)

9 / 68 (Adware)

http://www.ftdownloader.net/.../Aici_este_scris_sfârsitul_lumii.exe (slade87_minicmv5_hotifx1_cwm.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://rapidshare.com/files/.../violacion-o-montaje-www-microjons-com.flv&name=violacion-o-montaje-www-microjons-com.flv&pub=ftdown3&sp=1 (violacion-o-montaje-www-microjons-com.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/.../_.exe (3392c65fb379eefe5706d78e011b342b)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://www.4shared.com/mp3/.../Rolling_In_The_Deep_2011.htm?aff=7637829&name=Rolling In The Deep 2011&pub=ftdown3&sp=1 (rolling_in_the_deep_2011.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://rapidgator.net/.../63134751&name=Tahnee_Taylor_Big_Boob_Fuck_By_Neighbour_-_11_Dec_2012 rar 002&pub=ftdown3&sp=1 (downloadsetup.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://www.filefactory.com/file/.../&name=Estação Sambô - Ao Vivo - www musicasparabaixar org&pub=ftdown3&sp=1 (estação_sambô_-_ao_vivo_-_www_musicasparabaixar_org.exe)

9 / 68 (Adware)

http://www.ftdownloader.net/.../Jarle_Bernhoft_Ceramik_City_Chronicles_2008_KLV.exe (cheba_zohra_and_cheb_hamid_ana_wiyak.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://.../?6yjxkrawc866a7k&name=festo didactic.rar&pub=ftdown3&sp=1 (festo_didactic.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://freakshare.com/files/.../Sabroso_-_En_Vivo_-Garra_Puro_Coraz__n_y_Alegria-_-2012-.rar.html&name=Sabroso_-_En_Vivo_-Garra_Puro_Coraz__n_y_Alegria-_-2012-.rar&pub=ftdown3&sp=1 (sabroso_-_en_vivo_-garra_puro_coraz__n_y_alegria-_-2012-.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://rapidshare.com/files/.../Wolfram_Research_Mathematica_7.0.1.part6.rar&name=Wolfram_Research_Mathematica_7 0 1&pub=ftdown3&sp=1 (wolfram_research_mathematica_7_0_1.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://extabit.com/.../2b3kjqwragbce&name=Mathematica 9&pub=ftdown3&sp=1 (mathematica_9.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://www.scribd.com/doc/.../New-English-File-Upper-Intermediate-Workbook-Key&name=New English File Upper-Intermediate - Workbook Key&pub=ftdown3&sp=1 (new_english_file_upper-intermediate_-_workbook_key.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://freakshare.com/files/.../BCC-20--20Autumn.wmv.html&name=BCC-20--20Autumn&pub=ftdown3&sp=1 (bcc-20--20autumn.exe)

5 / 68 (Adware)

http://www.ftdownloader.net/.../QbjaybnqFrghc.exe (fruko_y_sus_tesos_pa_goza_con_fruko.exe)

9 / 68 (Adware)

http://www.ftdownloader.net/.../ColaOnTheBeat_Drank_2_Chainz_Ft_YG_Type_Beat_w_Hook_Exclusive_Banger.exe (cheba_zohra_and_cheb_hamid_ana_wiyak.exe)

9 / 68 (Adware)

http://www.ftdownloader.net/.../Alice_a_Bailey_Del_Intelecto_a_La_Intuicion.exe (slade87_minicmv5_hotifx1_cwm.exe)

5 / 68 (Adware)

http://www.ftdownloader.net/.../DevilDriver_The_Last_Kind_Words_2007_320kbps.exe (downloadsetup.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/.../loader.php?file=&name= &pub=ftdown--search--2&sp=1 (_.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://.../?lwtwfmmjyw4&name=Mukuchi na Koi no Tsutaekata by Yamato Nase JP.rar&pub=ftdown3&sp=1 (mukuchi_na_koi_no_tsutaekata_by_yamato_nase_jp.exe)

3 / 68 (Adware)

http://www.ftdownloader.net/.../DownloadSetup.exe (uyirvani_tamil_dubbed_movie.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://www.filefactory.com/file/.../&name=keygen_activador.rar&pub=ftdown3&sp=1 (keygen_activador.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/.../Eiga_Crayon_Shin_chan_Movie_8_Arashi_o_Yobu.exe (48c2176c5cb7871e2e954f7aad720c99)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://rapidgator.net/.../39164400&name=w4 2 Android&pub=ftdown3&sp=1 (w4_2_android.exe)

8 / 68 (Adware)

http://www.ftdownloader.net/.../2004_Evilfeast_Mysteries_Of_The_Nocturnal_Forest_Amb_b_m.exe (magix_digital_dj_2_00_crack.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://.../?8mpb01ufkv6151v&name=RP-Whatdafunk&pub=ftdown3&sp=1 (rp-whatdafunk.exe)

1 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://.../?n2jgc6uyzpco8zo&name=RP-Rocker&pub=ftdown3&sp=1 (rp-rocker.exe)

8 / 68 (Adware)

http://www.ftdownloader.net/.../The_Browning_Hypernova_2013_NaR.exe (magix_digital_dj_2_00_crack.exe)

9 / 68 (Adware)

http://www.ftdownloader.net/.../Calvin_Harris_18_Months_Complete_Deluxe_Edition_iTunes_Delu.exe (cheba_zohra_and_cheb_hamid_ana_wiyak.exe)

12 / 68 (Adware)

http://www.ftdownloader.net/download/product_download.php?file=http://letitbit.net/download/1525508/.../Sims3Launcher.exe.html&name=Sims3Launcher&pub=ftdown3&sp=1 (8a6434b47d0f5977361c98176b8c3ef1)

Latest 30 of 36 download URLs

The following 215 files have been seen to comunicate with www.ftdownloader.net in live environments.

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

onedrvup.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80

1799877.exe

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80

optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80

charles.exe (by Apple)

TCP » 54.72.9.51:80

onedrv.exe

TCP » 54.72.9.51:80

IEError.exe (IEError)

TCP » 54.72.9.51:80

updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80

install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80

toolbarupdaterservice.exe

TCP » 54.72.9.51:80

hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80

g.jpg

TCP » 54.72.9.51:80

smlb.jpg

TCP » 54.72.9.51:80

smlb.jpg

TCP » 54.72.9.51:80

hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

Latest 20 of 219 files

URL:

http://www.ftdownloader.net/

Google Analytics:

UA-48689684

Title:

“ftdownloader.net”

Network:

Amazon Web Services (AWS), running an EC2 instance

Web server:

nginx

Related Domains

1freesoftwareonline.com

antivirus-gratuit.pro

anyras.com

app-mak.com

appapia.com

30 of 618 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.