home

www.new-down.com

Elite Domains

Domain Information

The domain www.new-down.com registered by Elite Domains was initially registered in February of 2015 through GODADDY.COM, LLC. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Monday, February 2, 2015

Expires date:
Thursday, February 2, 2017

Updated date:
Tuesday, March 22, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Root domain:
new-down.com

Whois:
2 new-down.com records

The domain www.new-down.com has been seen to resolve to the following 2 IP addresses.

141.8.224.239
April 5, 2016

50.63.202.50
ip-50-63-202-50.ip.secureserver.net
February 29, 2016

File downloads found at URLs served by www.new-down.com.

0 / 68
http://www.new-down.com/alan4_download.php?url=aHR0cDovL2hkZGd1cnUuY29tL3NvZnR3YXJlL0hERC1MTEYtTG93LUxldmVsLUZvcm1hdC1Ub29sL0hERExMRnNldHVwLjQuMjUuZXhl  (hddllfsetup.4.25.exe)

0 / 68
http://www.new-down.com/alan4_download.php?url=ZnRwJTNBLy8xNS4yMTYuMTExLjEzL3B1Yi9zb2Z0cGFxL3NwNTUwMDEtNTU1MDAvc3A1NTA2My5leGU=  (sp55063.exe)

38 / 68    (Malware)
http://www.new-down.com/alan4_download.php?url=aHR0cDovL2Z0cC5ocC5jb20vcHViL3NvZnRsaWIvc29mdHdhcmUxMC9DT0wxNjQ1Ni9odi00MzMyMS0yL2xqcDIwMTVwY2w1dmlzdGEyazIwMDh4cDIwMDMuZXhl  (fifa05_pc_dl_demo_003.exe)

0 / 68
http://www.new-down.com/alan4_download.php?url=ZnRwJTNBLy8xNS4yMTYuMTExLjEzL3B1Yi9zb2Z0cGFxL3NwNTY1MDEtNTcwMDAvc3A1Njk1OS5leGU=  (sp56959.exe)

0 / 68
http://www.new-down.com/alan4_download.php?url=ZnRwJTNBLy9mdHAudXMuZGVsbC5jb20vYXVkaW8vUjI2MDgyNy5leGU=  (r260827.exe)

0 / 68
http://www.new-down.com/alan4_download.php?url=ZnRwJTNBLy9mdHAudXMuZGVsbC5jb20vbmV0d29yay9SMjI2NzQ2LmV4ZQ==  (r226746.exe)

0 / 68
http://www.new-down.com/alan4_download.php?url=aHR0cCUzQS8vZnRwLmhwLmNvbS9wdWIvc29mdHBhcS9zcDU4NTAxLTU5MDAwL3NwNTg1ODYuZXhl  (sp58586.exe)

0 / 68
http://www.new-down.com/alan4_download.php?url=aHR0cCUzQS8vZG93bmxvYWRzLmRlbGwuY29tL0ZPTERFUjAyNzA2NDkwTS8xL05ldHdvcmtfRHJpdmVyX1AzOVdQX1dOXzE3LjEuMTQwNy40NzRfQTAwLkVYRQ==  (network_driver_p39wp_wn_17.1.1407.474_a00.exe)

The following 7 files have been seen to comunicate with www.new-down.com in live environments.

TCP » 50.63.202.50:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.50:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 50.63.202.50:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.63.202.50:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 50.63.202.50:587
wrk.exe

TCP » 141.8.224.239:80
dislike.crx

TCP » 141.8.224.239:443
droppad.crx

URL:
http://www.new-down.com/

Title:
“new-down.com”

Web server:
Apache

Facebook:
Likes:  2
Shares:  4

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.