The domain de.download366.net is registered by proxy through GODADDY.COM, LLC and was originally registered in November of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Friday, November 16, 2012
Expires date:
Wednesday, November 16, 2016
Updated date:
Monday, October 20, 2014
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (97% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.Firseria.F, PUP.Installer.Firseria.I, PUP.Installer.Appsinstaller.I, PUP.Installer.AppsInstallerSL.I, PUP.Installer.AppsInstallerSL.J, PUP.AppsInstallerSL.F, PUP.AppsInstallerSL.Q, PUP.Installer.Firseria.P, PUP.FIRSERIASL.T, PUP.Installer.AppsInstallerSL.W, PUP.Installer.Firseria.Q, PUP.Installer.FIRSERIASL.F, PUP.Installer.AppsInstallerSL.V, PUP.Installer.SETUPPROCESS.H, PUP.Installer.BechiroSL.R, PUP.DelimaxConcept.I, PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.AppsInstaller (M), PUP.Solimba.SETUPPROCESS.Bundler (M), PUP.Solimba.Bundler, PUP.Solimba.Firseria.Bundler (M), PUP.Solimba.AppsInst.Bundler (M), PUP.Solimba.SETUPPRO.Bundler (M), PUP.Solimba (M)
100.00%
VIPRE Antivirus
DownloadMR, Threat.4782980, Threat.4150696, Trojan.Win32.Generic, Threat.4439742
45.95%
Vba32 AntiVirus
Downware.Morstar
43.24%
Sophos
Solimba Installer, DownloadMR, PUA 'Solimba Installer'
43.24%
Avira AntiVirus
APPL/Firseria.A, APPL/Firseria.A.6, APPL/Solimba.Gen, APPL/Firseria.A.34, APPL/Firseria.A.35, APPL/Firseria.5585, APPL/Firseria.A.38
43.24%
AVG
MalSign.Solimba, BundleApp, Generic_c.UC, Adware AdInstaller.Firseria, Adware BundleApp_r, Potentially harmful program Downloader.ATQ
40.54%
Comodo Security
Application.Win32.FirseriaInstaller.EAB, Application.Win32.FirseriaInstaller.RRB, Application.Win32.Solimba.GW, Application.Win32.FirseriaInstaller.RRA
40.54%
Malwarebytes
Trojan.Agent, PUP.Optional.Bundler, PUP.Optional.AppsInstaller, PUP.Optional.Solimba, PUP.Optional.Firseria, PUP.Optional.BundleInstaller.A
37.84%
K7 AntiVirus
Trojan , Unwanted-Program
37.84%
Dr.Web
Adware.Downware.2167, Adware.Downware.2640, Adware.Downware.1125, Trojan.DownLoader11.4341, Adware.Downware.1433, Trojan.MulDrop5.32888
35.14%
G Data
Win32.Application.Morstar, Application.Bundler.Firseria, Gen:Application.Bundler.Firseria, Gen:Variant.Application.Bundler.Kazy.132995
35.14%
IKARUS anti.virus
Trojan-Dropper, not-a-virus:Downloader.NSIS, not-a-virus:Downloader.Win32.Morstar, Application.Bundler, AdWare.BundleApp
35.14%
Agnitum Outpost
Packed/MPress, PUA.Firseria, PUA.Downloader, PUA.Solimba
32.43%
Panda Antivirus
Trj/Genetic.gen, PUP/MultiToolbar.A, Adware/Firseria
29.73%
ESET NOD32
Win32/FirseriaInstaller.H potentially unwanted application, Win32/FirseriaInstaller.F potentially unwanted application, Win32/FirseriaInstaller.C potentially unwanted application, MSIL/Solimba.AK.gen potentially unwanted application
29.73%
The domain de.download366.net has been seen to resolve to the following 10 IP addresses.
ec2-52-20-26-1.compute-1.amazonaws.com
May 27, 2016
ec2-54-210-177-99.compute-1.amazonaws.com
April 3, 2016
ec2-52-86-173-174.compute-1.amazonaws.com
April 3, 2016
ec2-52-2-153-162.compute-1.amazonaws.com
January 27, 2016
ec2-54-164-36-16.compute-1.amazonaws.com
January 27, 2016
ec2-54-209-16-10.compute-1.amazonaws.com
October 13, 2015
ec2-54-209-10-170.compute-1.amazonaws.com
October 13, 2015
ec2-54-243-100-6.compute-1.amazonaws.com
May 5, 2014
ec2-23-21-247-193.compute-1.amazonaws.com
May 5, 2014
File downloads found at URLs served by de.download366.net.
URL:
http://de.download366.net/
Google Analytics:
UA-18063553
Network:
Amazon Web Services (AWS), running an EC2 instance
Statistics are for the previous month.
Related Domains