kickasstorrents.eu

NOT DISCLOSED!  (Proxy Registrant)

Domain Information

The domain kickasstorrents.eu is registered by proxy through eNom, Inc. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the Namecheap, Inc. network.
Registrar:
eNom, Inc

Server location:
Georgia, United States (US)

ASN:
AS22612 NAMECHEAP-NET - Namecheap, Inc.

Scanner detections:
Detections  (78% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.AppsInstallerSL.P, PUP.AppsInstallerSL.P, PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.EilioDevelopments.Bundler (M), PUP.Vittalia.InstallAssistant.Installer (M), PUP.Solimba.EilioDevelopmentssl.Bundler (M), PUP.Solimba.AppsInstaller.Installer (M), PUP.installCore (M), PUP.Solimba.Firseria.Bundler (M), PUP.Solimba.AppsInst.Bundler (M), PUP.Solimba.Condesti.Bundler (M), PUP.Solimba.RAPIDDOW.Bundler (M), PUP.Solimba.SETUPPRO.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Solimba.PopelerS.Bundler (M), PUP.Solimba.EilioDev.Bundler (M), PUP.Solimba (M)
94.74%

VIPRE Antivirus
DownloadMR, Threat.4150696, Threat.4782980
15.79%

Avira AntiVirus
APPL/Solimba.Gen, TR/Dldr.Agent.33754, APPL/Firseria.Gen8
15.79%

McAfee
Artemis!63D50527A56C, PUP-FCC!94D88F68125E, Artemis!C59C262EF094, Trojan.Artemis!1353A94E43F1, Trojan.Artemis!9D4023208F4C
15.79%

McAfee Web Gateway
Artemis!63D50527A56C, Artemis!94D88F68125E, BehavesLike.Win32.BadFile.nh, Artemis!17A94D84D0A5
15.79%

avast!
Win32:Installer-N [PUP], Win32:Solimba-C [PUP], Win32:Solimba-Y [PUP], Win32:Solimba-M [PUP], Win32:PUP-gen [PUP]
13.16%

Comodo Security
Application.Win32.Solimba.GW, Application.Win32.Solimba.LSW, Application.Win32.Firseria.MAP
13.16%

Dr.Web
Adware.Downware.1125, Adware.Downware.11349, Trojan.DownLoader11.24441
13.16%

Sophos
DownloadMR, PUA 'Solimba Installer'
13.16%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud), VIRUS_UNKNOWN, Win32.Troj.DownMorstar.as.(kcloud), Win32.Troj.Undef.(kcloud)
13.16%

IKARUS anti.virus
Trojan-Dropper.Win32.Agent, Trojan-Downloader.Agent, AdWare.BundleApp, PUA.MSIL.Solimba
13.16%

Trend Micro House Call
TROJ_GEN.F47V0710, TROJ_GEN.F47V0614, TROJ_GEN.F0C2H00IM14, Suspicious_GEN.F47V0806
10.53%

Malwarebytes
PUP.Optional.Solimba, PUP.Optional.Firseria
10.53%

Kaspersky
not-a-virus:Downloader.NSIS.Agent, not-a-virus:Downloader.Win32.Morstar
10.53%

Antiy Labs AVL
Downloader/NSIS.Agent.gen, Trojan[Downloader:not-a-virus]/Win32.Morstar.as, Trojan/Win32.TSGeneric
10.53%

The domain kickasstorrents.eu has been seen to resolve to the following 5 IP addresses.

October 20, 2015

October 20, 2015

p5.web-hosting.com
October 9, 2014

p7.web-hosting.com
June 5, 2014

s37.web-hosting.com
December 26, 2013

File downloads found at URLs served by kickasstorrents.eu.

1 / 68      (Adware)

0 / 68

1 / 68      (Adware)
http://kickasstorrents.eu/.../  (file_downloader.exe)

The following 2 files have been seen to comunicate with kickasstorrents.eu in live environments.

URL:
http://kickasstorrents.eu/

Title:
“KickassTorrents Homepage – latest updates and reviews”

Description:
“The largest torrent community today is KickassTorrents. Search and discuss all kinds of torrent topics related to Kickasstorrent, also known as KAT.”

SSL certificate subject:
CN=sni37538.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

Facebook:
Likes:  1,750
Shares:  6,114
Comments:  234

Compete.com:
US visitors:  63,363

Statistics above are for the previous month of June 2017.