This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC
Server location:
Virginia, United States (US)
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (98% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.SalyutemPlyus.M, PUP.Bundler.Outbrowse, PUP.VUDGOFF.M, PUP.Outbrowse.SalyutemPlyus, PUP.Installer.Outborwse, PUP.Outbrowse.Bundler, PUP.Installer.safeInStaLlOpT, PUP.Outbrowse.StartPlaying.Bundler (M), PUP.Outbrowse.MAXTEK.Bundler (M), PUP.Outbrowse.clicktostarT.Bundler (M), PUP.Outbrowse.clicktos.Bundler (M), PUP.Outbrowse.CliCktOS.Bundler (M), PUP.Outbrowse.Salyutem.Bundler (M), PUP.Downloadius (M), PUP.Outbrowse (M)
100.00%
Dr.Web
Trojan.OutBrowse.55, infected with Trojan.OutBrowse.58, Trojan.OutBrowse.68, Trojan.OutBrowse.54, Trojan.OutBrowse.284, Trojan.OutBrowse.731
55.10%
ESET NOD32
Win32/OutBrowse.BQ potentially unwanted application, Win32/OutBrowse.BS potentially unwanted application, Win32/OutBrowse.BO potentially unwanted application
55.10%
McAfee
Adware-OutBrowse.d, Program.Adware-OutBrowse.d, Adware-OutBrowse.c, Program.Adware-OutBrowse.c, Program.Adware-OutBrowse.e
55.10%
Avira AntiVirus
APPL/Outbrowse.Gen, PUA/Outbrowse.Gen
53.06%
AVG
Generic, Potentially harmful program Downloader.CZX, Potentially harmful program Downloader.CZS, Potentially harmful program Downloader.CVZ
53.06%
Malwarebytes
PUP.Optional.OutBrowse, PUP.Optional.Outbrowse.Gen
48.98%
Trend Micro House Call
Suspici.3E5BCE57, Suspici.202D3B0F, Suspici.37ED827C, Suspici.572A0B99, Suspici.D7386B62, Suspici.C190457F, Suspici.8B120837
48.98%
AhnLab V3 Security
PUP/Win32.OutBrowse
48.98%
VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic.pak!cobra, Threat.4657539, Threat.4823950, Threat.4784459
48.98%
K7 AntiVirus
Unwanted-Program , Trojan , Adware
48.98%
NANO AntiVirus
Trojan.Win32.OutBrowse.dlhese, Trojan.Win32.OutBrowse.dlwssj, Trojan.Win32.OutBrowse.dmikii, Trojan.Win32.OutBrowse.dlunsw
48.98%
Kaspersky
not-a-virus:Downloader.NSIS.OutBrowse, not-a-virus:AdWare.Win32.OutBrowse
42.86%
Agnitum Outpost
PUA.Downloader, PUA.OutBrowse
38.78%
Sophos
Generic PUA DH, Generic PUA JC, Generic PUA MN, PUA 'OutBrowse Revenyou', Generic PUA PJ, Generic PUA CL, Generic PUA AO
36.73%
The domain get.down1702tech.info has been seen to resolve to the following 11 IP addresses.
ec2-174-129-27-73.compute-1.amazonaws.com
June 19, 2015
ec2-204-236-232-17.compute-1.amazonaws.com
June 19, 2015
ec2-23-21-110-94.compute-1.amazonaws.com
May 28, 2015
ec2-54-243-34-91.compute-1.amazonaws.com
May 5, 2015
ec2-184-73-227-85.compute-1.amazonaws.com
May 4, 2015
ec2-184-73-227-111.compute-1.amazonaws.com
May 4, 2015
ec2-54-221-239-224.compute-1.amazonaws.com
May 4, 2015
ec2-107-21-125-237.compute-1.amazonaws.com
May 4, 2015
ec2-204-236-231-181.compute-1.amazonaws.com
November 29, 2014
File downloads found at URLs served by get.down1702tech.info.
Latest 30 of 57 download URLs
The following 8 files have been seen to comunicate with get.down1702tech.info in live environments.
URL:
http://get.down1702tech.info/
Title:
“down1702tech.info”
Network:
Amazon Web Services (AWS), running an EC2 instance