download1157endpoint.com

Whois Privacy Corp.

Domain Information

The domain download1157endpoint.com registered by Whois Privacy Corp. was initially registered in August of 2014 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Server location:
Virginia, United States (US)

Create date:
Tuesday, August 12, 2014

Expires date:
Friday, August 12, 2016

Updated date:
Wednesday, December 2, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BootCompute.N, PUP.Installer.BuildInput.N, PUP.Installer.Adknowledge, PUP.Adknowledge.BuildInput.Bundler (M), PUP.Adknowledge.BootCompute.Installer (M), PUP.Adknowledge.BootCompute.Bundler (M), PUP.Adknowledge.BuildInput.Installer (M), PUP.Adknowledge.BootComp.Installer (M), PUP.Adknowledge.BootComp.Bundler (M), PUP.Adknowledge.BuildInp.Bundler (M)
100.00%

VIPRE Antivirus
Threat.4778314, Trojan.Win32.Clicker
56.52%

Dr.Web
Trojan.DownLoader11.32399, Trojan.DownLoader11.30369, Trojan.DownLoader11.30479, Trojan.DownLoader11.32545, Trojan.DownLoader11.27741
56.52%

avast!
Win32:Rootkit-gen [Rtk], Win32:Adware-gen [Adw], Win32:IBryte-EF [PUP], Win32:GenMalicious-ETY [Trj]
56.52%

Malwarebytes
PUP.Optional.Ibryte, PUP.Optional.OptimumInstaller.A, PUP.Optional.GigaClicks.A, PUP.Optional.OptimunInstaller
56.52%

K7 AntiVirus
Unwanted-Program , Riskware
56.52%

Comodo Security
Application.Win32.AgentCV.HWYE, Application.Win32.iBryte.WRP
56.52%

Sophos
Mal/Inject-CEE, iBryte Optimum Installer, PUA 'iBryte Optimum Installer', PUA.iBryte Optimum Installer
56.52%

Avira AntiVirus
ADWARE/iBryte.Gen7, ADWARE/Adware.Gen7, TR/Click.Clikug.A.34, TR/Kazy.439479.2, Adware/iBryte.bxmz
56.52%

G Data
Win32.Adware.Ibryte, Trojan.GenericKD.1618449, Gen:Variant.Kazy.439479, Gen:Variant.Application.Kazy.427497
56.52%

ESET NOD32
Win32/AdWare.iBryte.BH application, Win32/AdWare.iBryte.BD application, Win32/AdWare.iBryte.BG application, Win32/AdWare.iBryte.AR application
56.52%

AVG
Adware AdPlugin, Adware AdPlugin.ACI, Adware AdPlugin.ABD
56.52%

Panda Antivirus
Trj/Genetic.gen
56.52%

NANO AntiVirus
Riskware.Win32.IBryte.dfczab, Trojan.Win32.Agent.cxjjsz, Trojan.Win32.Adpeak.cumkpw, Trojan.Win32.IBryte.ddtkup
56.52%

Qihoo 360 Security
Malware.QVM10.Gen, Win32/Trojan.Dropper.c9f, Win32/Virus.Adware.cf5
56.52%

The domain download1157endpoint.com has been seen to resolve to the following 5 IP addresses.

ec2-54-235-191-182.compute-1.amazonaws.com
January 31, 2016

ec2-23-21-85-230.compute-1.amazonaws.com
December 7, 2015

ec2-54-204-30-210.compute-1.amazonaws.com
February 12, 2015

ec2-23-21-223-96.compute-1.amazonaws.com
November 29, 2014

ec2-54-235-107-24.compute-1.amazonaws.com
September 21, 2014

File downloads found at URLs served by download1157endpoint.com.

The following 2 files have been seen to comunicate with download1157endpoint.com in live environments.

URL:
http://download1157endpoint.com/

Google Analytics:
UA-32857080

Title:
“The Best Free Software”

Description:
“This site offers a wide variety of free, open-source software!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 2.0.50727)

30 of 76 related domains