Domain > api.downloadmr.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to api.downloadmr.com

MD5	A/V
5c4105cd5f051899941f7117b279896d	[PUP.Optional.Bechiro] [PUA.Firseria!] [Application.Win32.FirseriaInstaller.RRB] [APPL/Firseria.A.16] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [BundleApp.BZ]
02c65956fd92547b8b5c1c3415b613a7	[PUP.Optional.AppsInstaller] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [BundleApp.CB]
258c090001a86003f2e371dea8fe685c	[Artemis!258C090001A8] [PUP.Optional.AppsInstall] [PUA.Firseria!] [Application.Win32.FirseriaInstaller.RRB] [APPL/Firseria.A.16] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [BundleApp.BZ]
a3bd1360c6baee54c7ddab8024a55764
857099aa7ff478b979d9ec631e2ed07c	[PUP.Optional.Rapiddown] [ADW_RAPIDDOWN] [Adware.Toolbar.237] [MalSign.Solimba.032]
e15b4bfbf6ca1b76a5f6b3f95f3fbe1a
04bacf4e608e5dedd265e9dac8b36346	[Artemis!04BACF4E608E] [PUP.Optional.AppsInstaller] [Win32.Application.Morstar.B] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [BundleApp.CD]
276a23180a5c8d06a8886d9089c6926e	[PUP.Optional.Firseria] [Win32.Application.Morstar.B] [Downware.Morstar] [BundleApp.CQ]
460cbdaf8ad2262e306df69b748e1a75	[WS.Reputation.1] [Adware.Downware.1125] [DownloadMR] [MSIL/Solimba.L] [Adware/Solimba]
62d3892de3ffab420a313be9d9786d77	[Artemis!62D3892DE3FF] [PUP.Optional.Bechiro] [WS.Reputation.1] [PUA.Firseria!] [Application.Win32.FirseriaInstaller.RRB] [APPL/Firseria.A.16] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [Application.Bundler] [Riskware/FirseriaInstaller] [BundleApp.BZ] [Adware.Win32.FirseriaInstaller.G] [Win32/Application.eab]
2d429f3f17f8261eff47a4fd35e10a11	[Win32.Application.Morstar.B] [Downware.Morstar]
c007264640094b057fca47bb21c90e20
292ebdf295bc73a9ae417fda849f8fb3	[PUP.Optional.Firseria] [Win32.Application.Morstar.B] [Downware.Morstar] [PUP/MultiToolbar.A] [not-a-virus:Downloader.Win32.Morstar] [BundleApp.CL]
7036993319c455b9f98275d05dcdefc9	[PUP.Optional.AppsInstaller] [Win32.Application.Morstar.B] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [BundleApp.CD]
26ef273c3b11866940f75237e7da7f64	[PUP.Optional.Firseria] [Win32.Application.Morstar.B] [Downware.Morstar] [BundleApp.CQ]
088403a969bc64f8757e4ada2beb14bc	[Artemis!088403A969BC] [PUP.Optional.AppsInstall] [Riskware.Win32.Downware.cvyseb] [PUA.Firseria!] [Application.Win32.Solimba.N] [Adware.Downware.2488] [APPL/Firseria.A.4] [Adware.AppsInstall/Variant] [Win32.Application.Morstar.B] [Downware.Morstar] [Trojan-Dropper] [Riskware/FirseriaInstaller] [BundleApp.AD]
10958be59b7896f0b8658ded37758560	[Artemis!10958BE59B78] [PUP.Optional.Firseria] [PUA.Firseria!] [Adware.Downware.3110] [APPL/Firseria.A.19] [Win32.Application.Morstar.B] [Downware.Morstar] [Trojan-Dropper] [BundleApp.CL]
4137288ba963e7bf6e199ab4fc28df51
9a764561837d510187222fe4fb13ebe2	[PUP.Optional.PortalProgramas] [PUA.Firseria!] [Application.Win32.FirseriaInstaller.RRB] [APPL/Firseria.A.16] [Downware.Morstar] [PUP/MultiToolbar.A] [PE:Malware.FirseriaInstaller!6.17AF] [not-a-virus:Downloader.Win32.Morstar] [BundleApp.BZ]
582da7c13a0179bcefeaf3c8003381db	[Artemis!582DA7C13A01] [PUP.Optional.AppsInstaller] [Win32.Application.Morstar.B] [Downware.Morstar] [PE:Malware.FirseriaInstaller!6.17AF] [BundleApp.CD]

Whois

Property	Value
NameServer	NS-1789.AWSDNS-31.CO.UK
Created	2010-12-20 00:00:00
Changed	2015-04-25 00:00:00
Expires	2016-12-20 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-08-11	91.192.111.38 (ClassC)
2014-07-13	95.211.39.161 (ClassC)
2015-05-17	95.211.39.161 (ClassC)
2015-06-15	52.4.231.239 (ClassC)
2015-06-16	107.23.38.136 (ClassC)
2015-06-20	107.23.73.216 (ClassC)
2015-06-21	52.1.246.125 (ClassC)
2015-08-05	52.3.115.71 (ClassC)
2015-08-05	52.4.79.191 (ClassC)
2015-08-20	52.3.72.151 (ClassC)
2015-08-20	52.0.117.83 (ClassC)
2015-09-03	52.21.20.28 (ClassC)
2015-09-05	52.4.83.62 (ClassC)
2015-09-11	52.2.247.102 (ClassC)
2015-09-12	52.21.135.129 (ClassC)
2015-09-12	52.6.57.203 (ClassC)
2015-09-18	54.86.48.42 (ClassC)
2015-09-18	52.20.180.134 (ClassC)
2015-09-23	52.7.66.200 (ClassC)
2015-09-24	52.20.122.55 (ClassC)
2015-09-24	52.20.51.87 (ClassC)
2015-09-26	52.1.184.250 (ClassC)
2015-09-26	52.6.184.35 (ClassC)
2015-10-02	52.21.185.87 (ClassC)
2015-10-02	52.20.188.66 (ClassC)
2015-10-04	52.0.136.255 (ClassC)
2015-10-04	52.21.13.232 (ClassC)
2015-10-27	52.21.35.45 (ClassC)
2015-10-27	52.22.188.210 (ClassC)
2015-11-07	54.88.147.215 (ClassC)
2015-11-08	52.21.56.140 (ClassC)
2015-11-10	52.21.103.183 (ClassC)
2015-11-12	52.22.203.20 (ClassC)
2015-11-14	52.22.163.27 (ClassC)
2015-11-18	107.21.27.216 (ClassC)
2015-11-19	52.21.104.158 (ClassC)
2015-11-21	52.20.78.255 (ClassC)
2015-11-22	52.22.110.122 (ClassC)
2015-11-24	52.22.166.103 (ClassC)
2015-11-25	54.152.13.0 (ClassC)
2015-11-28	54.84.28.193 (ClassC)
2015-12-03	52.22.131.32 (ClassC)
2015-12-09	52.21.17.165 (ClassC)
2015-12-09	52.4.37.40 (ClassC)
2015-12-14	52.22.185.84 (ClassC)
2015-12-14	54.208.55.167 (ClassC)
2015-12-15	52.22.167.224 (ClassC)
2015-12-16	52.22.114.143 (ClassC)
2015-12-18	52.21.102.122 (ClassC)
2015-12-18	52.20.188.210 (ClassC)
2015-12-23	54.173.151.89 (ClassC)
2015-12-23	54.88.209.131 (ClassC)
2015-12-25	52.21.174.21 (ClassC)
2015-12-25	52.22.142.187 (ClassC)
2015-12-26	52.22.164.77 (ClassC)
2015-12-28	52.22.192.29 (ClassC)
2015-12-30	52.5.233.67 (ClassC)
2015-12-31	52.20.59.94 (ClassC)
2015-12-31	52.21.186.141 (ClassC)
2016-01-04	52.20.185.247 (ClassC)
2016-01-04	52.22.98.87 (ClassC)
2016-01-05	54.85.181.240 (ClassC)
2016-01-05	52.21.161.151 (ClassC)
2016-01-09	52.0.186.30 (ClassC)
2016-01-10	52.0.203.221 (ClassC)
2016-01-10	54.236.79.255 (ClassC)
2016-01-13	52.21.187.4 (ClassC)
2016-01-13	52.20.152.180 (ClassC)
2016-01-14	52.21.175.176 (ClassC)
2016-01-14	52.21.177.155 (ClassC)
2016-01-18	52.23.1.33 (ClassC)
2016-01-18	52.7.189.231 (ClassC)
2016-01-19	52.22.184.107 (ClassC)
2016-01-19	54.164.60.108 (ClassC)
2016-01-23	52.21.243.100 (ClassC)
2016-01-23	52.21.169.218 (ClassC)
2016-01-25	52.21.228.76 (ClassC)
2016-01-26	54.88.99.109 (ClassC)
2016-01-28	52.72.100.87 (ClassC)
2016-01-28	52.72.129.35 (ClassC)
2016-01-29	54.174.124.163 (ClassC)
2016-01-29	52.22.171.211 (ClassC)
2016-02-01	52.7.125.65 (ClassC)
2016-02-06	52.3.172.221 (ClassC)
2016-02-07	54.210.9.79 (ClassC)
2016-02-07	52.0.64.164 (ClassC)
2016-02-07	52.22.236.126 (ClassC)
2016-02-11	52.3.11.157 (ClassC)
2016-02-16	52.22.39.30 (ClassC)
2016-02-16	107.23.152.156 (ClassC)
2016-02-22	52.3.186.142 (ClassC)
2016-02-22	52.22.243.97 (ClassC)
2016-02-29	52.22.177.73 (ClassC)
2016-02-29	52.4.214.140 (ClassC)
2016-03-06	52.3.208.99 (ClassC)
2016-03-07	52.21.178.178 (ClassC)
2016-03-08	52.71.228.120 (ClassC)
2016-03-15	52.2.53.180 (ClassC)
2016-03-17	52.22.212.164 (ClassC)
2016-03-20	52.4.176.17 (ClassC)
2016-03-21	52.3.131.141 (ClassC)
2016-03-21	54.236.95.29 (ClassC)
2016-03-26	52.21.151.235 (ClassC)
2016-03-26	52.23.2.28 (ClassC)
2016-03-27	54.175.137.158 (ClassC)
2016-03-28	52.0.162.217 (ClassC)
2016-04-03	52.200.45.104 (ClassC)
2016-04-03	52.21.5.35 (ClassC)
2016-04-16	52.201.122.250 (ClassC)
2016-04-16	52.201.67.70 (ClassC)
2016-04-17	54.174.26.166 (ClassC)
2016-04-17	52.201.143.40 (ClassC)
2016-05-10	52.200.16.178 (ClassC)
2016-05-11	52.201.40.16 (ClassC)
2016-05-13	52.201.162.61 (ClassC)
2016-05-20	52.201.37.98 (ClassC)
2016-05-21	52.200.85.85 (ClassC)
2016-05-22	52.201.21.3 (ClassC)
2016-05-23	52.200.161.90 (ClassC)
2016-05-27	52.202.205.175 (ClassC)
2016-05-31	54.236.168.240 (ClassC)
2016-05-31	52.200.154.151 (ClassC)
2016-12-26	50.63.202.37 (ClassC)
2017-02-04	184.168.221.96 (ClassC)
2017-03-09	172.99.89.232 (ClassC)
2017-03-10	50.28.32.162 (ClassC)
2017-05-16	172.99.89.224 (ClassC)
2017-05-19	172.99.89.231 (ClassC)
2017-06-15	72.52.179.174 (ClassC)
2018-10-29	67.227.226.240 (ClassC)
2020-06-18	67.227.226.241 (ClassC)
2020-08-04	69.16.230.42 (ClassC)
2021-05-02	69.16.231.57 (ClassC)
2022-02-01	3.94.41.167 (ClassC)
2022-02-01	3.130.253.23 (ClassC)
2022-02-01	54.209.32.212 (ClassC)
2022-02-01	3.18.7.81 (ClassC)
2022-02-02	3.130.204.160 (ClassC)
2022-04-23	18.119.154.66 (ClassC)
2022-05-01	34.205.242.146 (ClassC)
2022-05-08	54.161.222.85 (ClassC)
2023-07-16	52.86.6.113 (ClassC)
2023-12-02	52.71.57.184 (ClassC)
2023-12-11	3.19.116.195 (ClassC)
2023-12-22	3.140.13.188 (ClassC)
2025-04-16	103.253.215.19 (ClassC)

Subdomains

Date	Domain	IP
api.downloadmr.com	2013-08-11	91.192.111.38
northstar.downloadmr.com	2023-07-16	3.140.13.188

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]