downloadair.com

FUSION INSTALL  (via a Proxy Registrant)

Domain Information

The domain downloadair.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in January of 2014. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform. The domain is associated with the publisher FUSION INSTALL who is located in Kansas City, Missouri in the United States.
Remove Malware from downloadair.com - Powered by Reason Core Security
Registrar:
TUCOWS DOMAINS INC.

Server location:
Virginia, United States (US)

Create date:
Tuesday, January 14, 2014

Expires date:
Thursday, January 14, 2016

Updated date:
Friday, August 07, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Gen:Variant.Kazy.439479
100.00%

VIPRE Antivirus
Threat.4778314
100.00%

Lavasoft Ad-Aware
Gen:Variant.Kazy.439479
100.00%

Sophos
iBryte Optimum Installer, PUA.iBryte Optimum Installer
100.00%

Comodo Security
Application.Win32.AgentCV.HWYE
100.00%

F-Secure
Gen:Variant.Kazy.439479
100.00%

Avira AntiVirus
TR/Kazy.439479.2
100.00%

Panda Antivirus
Trj/Genetic.gen
100.00%

ESET NOD32
Win32/AdWare.iBryte.BD (variant)
100.00%

AVG
Adware AdPlugin.AAZ
100.00%

Reason Heuristics
PUP.Installer.BootCompute.F, PUP.Adknowledge.BootCompute.Bundler (M)
100.00%

MicroWorld eScan
Trojan.GenericKD.1618449, Gen:Variant.Kazy.439479
100.00%

nProtect
Trojan.GenericKD.1618449
100.00%

McAfee
Artemis!0FF2B0F7AD04
100.00%

Malwarebytes
PUP.Optional.GigaClicks.A
100.00%

The domain downloadair.com has been seen to resolve to the following 5 IP addresses.

ec2-52-20-167-28.compute-1.amazonaws.com
December 23, 2015

ec2-52-20-182-179.compute-1.amazonaws.com
December 15, 2015

ec2-52-2-5-65.compute-1.amazonaws.com
August 27, 2015

ec2-50-16-246-149.compute-1.amazonaws.com
August 28, 2014

ec2-54-243-162-14.compute-1.amazonaws.com
May 8, 2014

File downloads found at URLs served by downloadair.com.

URL:
http://downloadair.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

Remove Malware from downloadair.com - Powered by Reason Core Security