kickasstorrents.eu

NOT DISCLOSED!  (Proxy Registrant)

Domain Information

The domain kickasstorrents.eu is registered by proxy through eNom, Inc. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the Namecheap, Inc. network.
Registrar:
eNom, Inc

Server location:
Georgia, United States (US)

ASN:
AS22612 NAMECHEAP-NET - Namecheap, Inc.

Scanner detections:
Detections  (87% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.RAPIDDOWN.P, PUP.Installer.SETUPPROCESS.P, PUP.Installer.AppsInstallerSL.P, PUP.Installer.Firseria.P, PUP.FIRSERIASL.P, PUP.Installer.FIRSERIASL.P, PUP.Installer.PopelerSystemsl.F, PUP.Installer.EilioDevelopmentssl.F, PUP.Installer.FIRSERIASL.F, PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.EilioDevelopments.Bundler (M), PUP.Vittalia.InstallAssistant.Installer (M), PUP.Solimba.EilioDevelopmentssl.Bundler (M), PUP.Solimba.AppsInstaller.Installer (M)
91.18%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4782980, Threat.4150696, DownloadMR, Adware.Firseria, Threat.4758821, Threat.4657539
82.35%

Avira AntiVirus
TR/Dropper.Gen, APPL/FirseriaH.A.2, APPL/FirseriaI.A, Adware/Nsis.Agent.bk, APPL/Solimba.Gen, APPL/Bundler.Firseria.A.11
79.41%

Malwarebytes
PUP.Optional.Firseria, PUP.Optional.FirseriaInstaller, PUP.Optional.InstallCore, PUP.Optional.AppsInstaller, .PUP.Optional.Solimba
76.47%

Sophos
Solimba Installer, DownloadMR, PUA 'Solimba Installer'
73.53%

Dr.Web
Trojan.DownLoader11.3085, Trojan.MulDrop5.32888, Adware.Downware.4802, Adware.Downware.1125, Adware.Downware.1433, Trojan.MulDrop5.34145, Trojan.DownLoader11.24441
73.53%

G Data
Win32.Application.FirseriaInstaller, Win32.Application.Morstar, Application.Bundler, Gen:Variant.Jaike.125, Gen:Variant.Application.Bundler.Firseria
73.53%

AVG
MalSign.Generic, Luhe.Fiha.A, Adware BundleApp.DW, Adware BundleApp.FA, Adware AdInstaller.Firseria, Solimba, Adware BundleApp.GY
73.53%

K7 Gateway Antivirus
Unwanted-Program , Trojan , Riskware
70.59%

Vba32 AntiVirus
Downloader.Morstar, Downware.Morstar
67.65%

Panda Antivirus
Trj/Genetic.gen, Adware/Firseria, Trj/CI.A
67.65%

K7 AntiVirus
Unwanted-Program , Riskware
67.65%

AhnLab V3 Security
PUP/Win32.FirseriaInstaller, PUP/Win32.Bundler, PUP/Win32.Solimba
64.71%

IKARUS anti.virus
PUA.Solimba, not-a-virus:Downloader.Win32.Morstar, PUA.MSIL.Solimba, AdWare.BundleApp, Trojan-Dropper.Win32.Agent, Trojan-Downloader.Agent
64.71%

NANO AntiVirus
Trojan.Win32.Morstar.creklv, Trojan.Win32.DownLoader11.czvwwp, Riskware.Win32.Downware.dbhvln, Riskware.Win32.Downware.dbojhq
61.76%

The domain kickasstorrents.eu has been seen to resolve to the following 5 IP addresses.

October 20, 2015

October 20, 2015

p5.web-hosting.com
October 9, 2014

p7.web-hosting.com
June 5, 2014

s37.web-hosting.com
December 26, 2013

File downloads found at URLs served by kickasstorrents.eu.

0 / 68
http://kickasstorrents.eu/.../source.php  (jre-8u25-windows-i586.exe)

1 / 68      (Adware)
http://kickasstorrents.eu/.../  (file_downloader.exe)

1 / 68      (Adware)
http://kickasstorrents.eu/.../  (file_downloader.exe)

URL:
http://kickasstorrents.eu/

Title:
“KickassTorrents Homepage – latest updates and reviews”

Description:
“The largest torrent community today is KickassTorrents. Search and discuss all kinds of torrent topics related to Kickasstorrent, also known as KAT.”

SSL certificate subject:
CN=sni37538.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

Facebook:
Likes:  1,350
Shares:  5,114
Comments:  234

Compete.com:
US visitors:  63,363

Statistics above are for the previous month of January 2017.