download6735endpoint.com

Whois Privacy Corp.

Domain Information

The domain download6735endpoint.com registered by Whois Privacy Corp. was initially registered in August of 2014 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
INTERNET.BS CORP.

Server location:
Virginia, United States (US)

Create date:
Tuesday, August 12, 2014

Expires date:
Wednesday, August 12, 2015

Updated date:
Tuesday, August 12, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.FileMonarch.N, PUP.Installer.BootCompute.H, PUP.Installer.FileMonarch.H, PUP.Installer.ComputeClient.H, PUP.Adknowledge.Installer, PUP.Adknowledge.BuildInput.Bundler (M), PUP.Adknowledge.BootCompute.Bundler (M), PUP.Adknowledge.BuildInput.Installer (M), PUP.Adknowledge.ComputeClient.Bundler (M), PUP.Adknowledge.BootComp.Bundler (M), PUP.Adknowledge.BuildInp.Bundler (M), PUP.Adknowledge.ComputeC.Bundler (M), PUP.Adknowledge (M)
100.00%

VIPRE Antivirus
Threat.4778314
37.14%

Malwarebytes
PUP.Optional.Ibryte, PUP.Optional.GigaClicks.A, PUP.Optional.OptimumInstaller.A
37.14%

K7 AntiVirus
Unwanted-Program , Riskware
37.14%

Avira AntiVirus
Adware/iBryte.bxop, TR/Kazy.439479.2, ADWARE/iBryte.Gen7, TR/Kazy.447695, Adware/iBryte.bxov, ADWARE/Adware.Gen7
37.14%

G Data
Win32.Adware.Ibryte, Gen:Variant.Kazy.439479, Gen:Variant.Kazy.466534
37.14%

AVG
Generic, Adware AdPlugin, Adware AdPlugin.AGJ, Adware AdPlugin.AGR, Adware AdPlugin.AIJ, Adware AdPlugin.AIA
37.14%

Kaspersky
not-a-virus:AdWare.Win32.iBryte, Trojan-Clicker.Win32.Agent, not-a-virus:Downloader.Win32.Agent, not-a-virus:Downloader.NSIS.Agent
34.29%

Sophos
iBryte Optimum Installer, PUA.iBryte Optimum Installer, Mal/Inject-CEE, PUA 'iBryte Optimum Installer'
34.29%

Comodo Security
Application.Win32.AgentCV.HWYE, Application.Win32.iBryte.WRP
34.29%

avast!
Win32:Adware-gen [Adw], Win32:IBryte-FC [PUP], Win32:GenMalicious-DBU [PUP], Win32:GenMalicious-ETY [Trj]
31.43%

NANO AntiVirus
Trojan.Win32.Adpeak.cumkpw, Riskware.Win32.IBryte.dfecyj, Trojan.Win32.DownLoader11.devtgz, Trojan.Win32.Buzus.dentbc, Trojan.Win32.DownLoader11.devbxn
31.43%

Dr.Web
Trojan.DownLoader11.32545, Trojan.DownLoader11.31923, Trojan.DownLoader11.32509, Trojan.DownLoader11.32118, Trojan.DownLoad3.34357
28.57%

Panda Antivirus
Trj/Genetic.gen
28.57%

ESET NOD32
Win32/AdWare.iBryte.BH application, Win32/AdWare.iBryte.BG application, Win32/AdWare.iBryte.AR application
28.57%

The domain download6735endpoint.com has been seen to resolve to the following 4 IP addresses.

ec2-23-21-85-230.compute-1.amazonaws.com
June 18, 2015

ec2-54-204-30-210.compute-1.amazonaws.com
October 24, 2014

ec2-54-243-162-99.compute-1.amazonaws.com
September 18, 2014

ec2-54-235-107-24.compute-1.amazonaws.com
September 7, 2014

File downloads found at URLs served by download6735endpoint.com.

 
Latest 30 of 35 download URLs

The following 2 files have been seen to comunicate with download6735endpoint.com in live environments.

URL:
http://download6735endpoint.com/

Google Analytics:
UA-32857080

Title:
“The Best Free Software”

Description:
“This site offers a wide variety of free, open-source software!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 2.0.50727)

30 of 76 related domains