The domain directdownload80.com registered by Corp New Ventures Services was initially registered in December of 2015 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Corp New Ventures Services
Registrar:
NAMESELITE, LLC
Server location:
Virginia, United States (US)
Create date:
Wednesday, December 2, 2015
Expires date:
Friday, December 2, 2016
Updated date:
Wednesday, December 9, 2015
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.BootCompute.N, PUP.Installer.BootCompute.U, PUP.Installer.BootCompute.F, PUP.Installer.BootCompute.H, PUP.Installer.TigerDownload.U, PUP.Installer.Adknowledge, PUP.Adknowledge.TigerDownload.Installer (M), PUP.Adknowledge.Liquidbu.Installer (M), PUP.Adknowledge.OverallM.Installer (M)
91.67%
Microsoft Security Essentials
Worm:Win32/NeksMiner.A, TrojanClicker:Win32/Clikug.A
66.67%
VIPRE Antivirus
Threat.4778314, Trojan.Win32.Clicker, Threat.4798837
66.67%
avast!
Win32:Rootkit-gen [Rtk], Win32:Adware-gen [Adw]
66.67%
Malwarebytes
PUP.Optional.Ibryte, PUP.Optional.GigaClicks.A, PUP.Optional.Fusion.A, PUP.Optional.OptimunInstaller
66.67%
K7 AntiVirus
Unwanted-Program , Riskware
66.67%
Comodo Security
Application.Win32.AgentCV.HWYE, Application.Win32.iBryte.WRP
66.67%
Avira AntiVirus
ADWARE/iBryte.Gen7, TR/Click.Clikug.A.34, TR/Kazy.439479.2
66.67%
G Data
Win32.Adware.Ibryte, Trojan.GenericKD.1618449, Win32.Adware.IBryte, Gen:Variant.Kazy.439479
66.67%
ESET NOD32
Win32/AdWare.iBryte.BH application, Win32/AdWare.iBryte.BG application, Win32/Adware.iBryte.BR application, Win32/Adware.iBryte.BQ application
66.67%
AVG
Adware AdPlugin, Adware AdPlugin.AKU, Adware AdPlugin.AOE, Adware AdPlugin.ARI, Found Win32/DH{gRKBEyAlflCBB3lUTxVRgQkcU04}
66.67%
Panda Antivirus
Trj/Genetic.gen
66.67%
NANO AntiVirus
Riskware.Win32.IBryte.dfczab, Riskware.Win32.IBryte.dfecyj, Trojan.Win32.Adpeak.cumkpw, Trojan.Win32.Badur.dhhunu
66.67%
Fortinet FortiGate
W32/Malware_fam.NB, W32/Wonton.J!tr
66.67%
F-Prot
W32/A-c255719d, W32/A-4a7f4ee7, W32/A-2b3be3da, W32/A-138dbbfa
66.67%
The domain directdownload80.com has been seen to resolve to the following 3 IP addresses.
ec2-107-20-176-238.compute-1.amazonaws.com
December 1, 2014
ec2-107-20-176-51.compute-1.amazonaws.com
December 1, 2014
File downloads found at URLs served by directdownload80.com.
The following 2 files have been seen to comunicate with directdownload80.com in live environments.
URL:
http://directdownload80.com/
Network:
Amazon Web Services (AWS), running an EC2 instance