www.download366.info

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.download366.info is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from www.download366.info - Powered by Reason Core Security
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.AppsInstallerSL.H, PUP.AppsInstallerSL.V, PUP.Installer.AppsInstallerSL.V, PUP.Installer.AppsInstallerSL.F, PUP.Installer.FIRSERIASL.G, PUP.Installer.EilioDevelopmentssl.G, PUP.Installer.EilioDevelopmentssl.P, PUP.Installer.AppsInstallerSL.G, PUP.Installer.Firseria.V, PUP.Installer.Firseria.F, PUP.Installer.EilioDevelopmentssl.M, PUP.Installer.BechiroSL.P, PUP.Installer.RAPIDDOWN.G, PUP.DelimaxConcept.M, PUP.Solimba.Bechirosl, PUP.Solimba.EilioDevelopmentssl.Installer (M), PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.AppsInstaller (M), PUP.Solimba.SETUPPROCESS.Bundler (M), PUP.Solimba.AppsInstaller.Installer (M), Adware.Solimba.AppsInstaller.Installer (M), PUP.Solimba.Firseria.Bundler (M), PUP.Solimba.PopelerSystemsl.Installer (M), PUP.Solimba.RAPIDDOWN.Bundler (M), PUP.Solimba.ContumarEmpresarial (M), PUP.installCore.MaxSetup (M), PUP.Outbrowse.Bundler (M), PUP.Solimba.Bechiro.Bundler (M)
100.00%

VIPRE Antivirus
DownloadMR, Threat.4782980, Threat.4150696, Threat.4439742, Trojan.Win32.Generic
38.00%

Sophos
Solimba Installer, DownloadMR, PUA 'Solimba Installer'
36.00%

Dr.Web
Trojan.DownLoader11.4341, Adware.Downware.1125, Trojan.DownLoader11.24441, Adware.Downware.2230, Trojan.MulDrop5.34677, Adware.Downware.2158
36.00%

K7 Gateway Antivirus
Trojan , Unwanted-Program
34.00%

K7 AntiVirus
Trojan , Unwanted-Program , Backdoor
34.00%

Comodo Security
Application.Win32.FirseriaInstaller.RRA, Application.Win32.Firseria.CJL, Application.Win32.Solimba.GW, Application.Win32.Firseria.MAP
34.00%

NANO AntiVirus
Riskware.Win32.Downware.cxbprf, Trojan.Win32.Agent.czpbya, Trojan.Win32.DownLoader11.ddphbo, Trojan.Win32.Morstar.deknwg
32.00%

Avira AntiVirus
APPL/Firseria.A.25, APPL/Firseria.A.35, APPL/Solimba.Gen, APPL/Firseria.Gen8, APPL/FirseriaH.A.3, APPL/Firseria.rfwr, APPL/FirseriaS.A.1
32.00%

Malwarebytes
PUP.Optional.AppsInstaller, PUP.Optional.Firseria, PUP.Optional.Solimba, PUP.Optional.Bechiro, PUP.Optional.BundleInstaller.A
30.00%

G Data
Win32.Application.Morstar, Application.Bundler.Firseria, Gen:Variant.Application.Bundler.Kazy.132995, Gen:Application.Bundler.Firseria
30.00%

Vba32 AntiVirus
Downware.Morstar
30.00%

AVG
BundleApp, Adware BundleApp.DP, Adware BundleApp_r.AJ, Generic, Adware BundleApp.A, Adware BundleApp.GY, Adware BundleApp.GN
30.00%

ESET NOD32
Win32/FirseriaInstaller.J potentially unwanted application, MSIL/Solimba.AH potentially unwanted application, Win32/FirseriaInstaller.H potentially unwanted application
30.00%

Agnitum Outpost
PUA.Firseria, PUA.Solimba, PUA.Downloader
28.00%

The domain www.download366.info has been seen to resolve to the following 7 IP addresses.

ec2-52-2-153-162.compute-1.amazonaws.com
December 7, 2015

ec2-54-164-36-16.compute-1.amazonaws.com
December 7, 2015

ec2-54-174-14-240.compute-1.amazonaws.com
July 23, 2015

ec2-54-174-170-224.compute-1.amazonaws.com
July 23, 2015

ec2-23-21-247-193.compute-1.amazonaws.com
May 1, 2014

ec2-54-243-100-6.compute-1.amazonaws.com
May 1, 2014

January 28, 2014

File downloads found at URLs served by www.download366.info.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

6 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://www.download366.info/photoscape/.../photoscape.exe  (700d672cfd4c89bdd8874b07ae431f03)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

35 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

13 / 68    (Adware)

13 / 68    (Adware)

35 / 68    (Adware)

30 / 68    (Adware)

36 / 68    (Adware)

35 / 68    (Adware)

 
Latest 30 of 63 download URLs

URL:
http://www.download366.info/

Google Analytics:
UA-18063553

Title:
“Download366”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx

Facebook:
Shares:  11

Statistics are for the previous month.

Remove Malware from www.download366.info - Powered by Reason Core Security