The domain downloadacer.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in January of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Contact Privacy Inc. Customer 0136433971
Registrar:
TUCOWS DOMAINS INC.
Server location:
Virginia, United States (US)
Create date:
Tuesday, January 14, 2014
Expires date:
Saturday, January 14, 2017
Updated date:
Wednesday, January 13, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.InstallX.Bundle, PUP.Systweak.ThePhone.Installer.Meta (L), PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.Adknowledge.ComputeClient.Bundler (M), PUP.Adknowledge.ComputeClient.Installer (M), PUP.Adknowledge.Seekinstall.Installer (M), PUP.Adknowledge.BootCompute.Bundler (M), PUP.Adknowledge.TigerDownload.Bundler (M), PUP.Softpulse.DIGITALPLUGINU.Installer (M), PUP.Air Software.InstallerSetup.Installer (M), PUP.Adknowledge.TigerDow.Bundler (M), PUP.Adknowledge.ComputeC.Installer (M), PUP.Adknowledge.BootComp.Bundler (M), Threat.Win.Reputation.IMP, PUP.Adknowledge.ComputeC.Bundler (M), PUP.NewMedia.NMH.Bundler (M), PUP.Adknowledge (M)
97.92%
Bkav FE
W32.Clod966.Trojan, W32.HfsAdware
22.92%
ESET NOD32
Win32/AdWare.iBryte.BG application, Win32/AdWare.iBryte.BH application, NSIS/TrojanDownloader.Adload.AG trojan, Win32/Adware.iBryte.BS application, Win32/Adware.BitCro.A application
22.92%
Fortinet FortiGate
W32/Malware_fam.NB, Riskware/InstallCore, W32/Adload.AG!tr.dldr
22.92%
avast!
Win32:Adware-gen [Adw], Win32:IBryte-KG [PUP], Win32:IBryte-EF [PUP]
20.83%
VIPRE Antivirus
Threat.4778314, Threat.4798837
20.83%
Comodo Security
Application.Win32.AgentCV.HWYE, Application.Win32.iBryte.BYK
20.83%
Avira AntiVirus
ADWARE/iBryte.Gen7, TR/Dldr.Adload.117576.3, Adware/iBryte.bxmz, APPL/OpenInst.pepoh
20.83%
G Data
Win32.Adware.Ibryte, Gen:Variant.Adware.Strictor.76822, Gen:Variant.Application.Kazy.427497, Win32.Adware.IBryte
20.83%
AVG
Win.Threat.Medium, Adware AdPlugin, Found Win32/DH{gRKBEyAlflCBB3lUTxVRgQkcU04}
20.83%
K7 AntiVirus
Unwanted-Program
20.83%
MicroWorld eScan
Trojan.GenericKD.1618449, Gen:Variant.Adware.Strictor.76822, Gen:Variant.Application.Kazy.427497, Gen:Variant.Kazy.439479
20.83%
nProtect
Trojan.GenericKD.1618449, Trojan-Clicker/W32.iBryte.117576, Adware.IBryte.AF
20.83%
Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.iBryte
20.83%
Bitdefender
Trojan.GenericKD.1618449, Gen:Variant.Adware.Strictor.76822, Gen:Variant.Application.Kazy.427497, Gen:Variant.Adware.Graftor.161766
20.83%
The domain downloadacer.com has been seen to resolve to the following 11 IP addresses.
ec2-54-210-180-22.compute-1.amazonaws.com
April 14, 2016
ec2-54-84-187-203.compute-1.amazonaws.com
April 4, 2016
ec2-52-22-129-36.compute-1.amazonaws.com
February 16, 2016
ec2-52-20-41-248.compute-1.amazonaws.com
January 27, 2016
ec2-52-20-182-179.compute-1.amazonaws.com
January 5, 2016
ec2-52-20-167-28.compute-1.amazonaws.com
November 13, 2015
ec2-52-2-5-65.compute-1.amazonaws.com
October 12, 2015
ec2-54-173-230-197.compute-1.amazonaws.com
June 30, 2015
ec2-50-19-244-90.compute-1.amazonaws.com
February 14, 2015
ec2-50-16-246-149.compute-1.amazonaws.com
November 10, 2014
ec2-107-21-120-240.compute-1.amazonaws.com
October 24, 2014
File downloads found at URLs served by downloadacer.com.
The following 3 files have been seen to comunicate with downloadacer.com in live environments.
URL:
http://downloadacer.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)