This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Server location:
Oregon, United States (US)
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (93% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.AlexeyKurilenko.FF, PUP.AlexeyKurilenko.I, PUP.AlexeyKurilenko.W, PUP.AlexeyKurilenko.U, Adware.WebPick.Installer.Y, Adware.WebPick.Installer.t, PUP.WebPick.AlexeyKurilenko (M), Adware.WebPick.Installer (M), PUP.IgorKram (M), PUP.WebPick.SergeyPa.Bundler (M)
92.86%
Dr.Web
Adware.Downware.6043, Adware.Downware.6035, Trojan.WebPick.2798, Trojan.WebPick.2807, Trojan.WebPick.2620, Trojan.WebPick.2735
42.86%
avast!
Win32:PUP-gen [PUP], Win32:InstalleRex-CH [PUP], Win32:InstalleRex-CC [PUP]
42.86%
VIPRE Antivirus
Threat.4150696, Threat.4786450
42.86%
AVG
Adware Generic5.BASR, Adware Generic5.BAZD, Adware Generic_r.RI, Adware Generic5.BIHE
42.86%
McAfee
PUP-FMH, PUP-FIC, Program.CryptMplug, PUP-FMU, PUP-FHQ, PUP-FMK
42.86%
Malwarebytes
PUP.Optional.Unizeto, PUP.Optional.Preload, PUP.Optional.MultiPlug, PUP.Optional.InstallRex, PUP.Optional.InstalleRex, PUP.Optional.InstalRex
42.86%
NANO AntiVirus
Riskware.Win32.MLW.dcitpt, Riskware.Win32.MultiPlug.dchugy, Trojan.Win32.Crossrider.ddnccj, Trojan.Win32.WebPick.ddtmci
42.86%
Sophos
MultiPlug, InstallRex
42.86%
MicroWorld eScan
Gen:Variant.Adware.Dropper.103, Application.Generic.681480, Gen:Variant.Kazy.432869, Trojan.Generic.11450386, Gen:Variant.Strictor.63002
35.71%
Bitdefender
Gen:Variant.Adware.Dropper.103, Application.Generic.681480, Gen:Variant.Kazy.432869, Trojan.Generic.11450386, Gen:Variant.Strictor.63002
35.71%
Lavasoft Ad-Aware
Gen:Variant.Adware.Dropper.103, Application.Generic.681480, Gen:Variant.Kazy.432869, Trojan.Generic.11450386, Gen:Variant.Strictor.63002
35.71%
Comodo Security
Application.Win32.Multiplug.GETF, Application.Win32.MultiPlug.YX, Application.Win32.InstalleRex.KG
35.71%
F-Secure
Gen:Variant.Adware.Dropper.103, Application.Generic.681480, Gen:Variant.Kazy.432869, Trojan.Generic.11450386, Gen:Variant.Strictor.63002
35.71%
G Data
Gen:Variant.Adware.Dropper.103, Application.Generic.681480, Gen:Variant.Kazy.432869, Trojan.Generic.11450386, Gen:Variant.Strictor.63002
35.71%
The domain toolkitset.info has been seen to resolve to the following 3 IP addresses.
ec2-54-186-238-14.us-west-2.compute.amazonaws.com
August 7, 2014
File downloads found at URLs served by toolkitset.info.
The following file have been seen to comunicate with toolkitset.info in live environments.
Subdomains
URL:
http://toolkitset.info/
Google Analytics:
UA-48689684
Description:
“toolkitset.info is your first and best source for information about toolkitset . Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!”
Network:
Amazon Web Services (AWS), running an EC2 instance
Related Domains
30 of 618 related domains