downloadacer.com

Contact Privacy Inc. Customer 0136433971  (Proxy Registrant)

Domain Information

The domain downloadacer.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in January of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
TUCOWS DOMAINS INC.

Server location:
Virginia, United States (US)

Create date:
Tuesday, January 14, 2014

Expires date:
Saturday, January 14, 2017

Updated date:
Wednesday, January 13, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallX.Bundle, PUP.Systweak.ThePhone.Installer.Meta (L), PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.Adknowledge.ComputeClient.Bundler (M), PUP.Adknowledge.ComputeClient.Installer (M), PUP.Adknowledge.Seekinstall.Installer (M), PUP.Adknowledge.BootCompute.Bundler (M), PUP.Adknowledge.TigerDownload.Bundler (M), PUP.Softpulse.DIGITALPLUGINU.Installer (M), PUP.Air Software.InstallerSetup.Installer (M), PUP.Adknowledge.TigerDow.Bundler (M), PUP.Adknowledge.ComputeC.Installer (M), PUP.Adknowledge.BootComp.Bundler (M), Threat.Win.Reputation.IMP, PUP.Adknowledge.ComputeC.Bundler (M), PUP.NewMedia.NMH.Bundler (M), PUP.Adknowledge (M)
97.92%

Bkav FE
W32.Clod966.Trojan, W32.HfsAdware
22.92%

ESET NOD32
Win32/AdWare.iBryte.BG application, Win32/AdWare.iBryte.BH application, NSIS/TrojanDownloader.Adload.AG trojan, Win32/Adware.iBryte.BS application, Win32/Adware.BitCro.A application
22.92%

Fortinet FortiGate
W32/Malware_fam.NB, Riskware/InstallCore, W32/Adload.AG!tr.dldr
22.92%

avast!
Win32:Adware-gen [Adw], Win32:IBryte-KG [PUP], Win32:IBryte-EF [PUP]
20.83%

VIPRE Antivirus
Threat.4778314, Threat.4798837
20.83%

Comodo Security
Application.Win32.AgentCV.HWYE, Application.Win32.iBryte.BYK
20.83%

Avira AntiVirus
ADWARE/iBryte.Gen7, TR/Dldr.Adload.117576.3, Adware/iBryte.bxmz, APPL/OpenInst.pepoh
20.83%

G Data
Win32.Adware.Ibryte, Gen:Variant.Adware.Strictor.76822, Gen:Variant.Application.Kazy.427497, Win32.Adware.IBryte
20.83%

AVG
Win.Threat.Medium, Adware AdPlugin, Found Win32/DH{gRKBEyAlflCBB3lUTxVRgQkcU04}
20.83%

K7 AntiVirus
Unwanted-Program
20.83%

MicroWorld eScan
Trojan.GenericKD.1618449, Gen:Variant.Adware.Strictor.76822, Gen:Variant.Application.Kazy.427497, Gen:Variant.Kazy.439479
20.83%

nProtect
Trojan.GenericKD.1618449, Trojan-Clicker/W32.iBryte.117576, Adware.IBryte.AF
20.83%

Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:AdWare.Win32.iBryte
20.83%

Bitdefender
Trojan.GenericKD.1618449, Gen:Variant.Adware.Strictor.76822, Gen:Variant.Application.Kazy.427497, Gen:Variant.Adware.Graftor.161766
20.83%

The domain downloadacer.com has been seen to resolve to the following 11 IP addresses.

ec2-54-210-180-22.compute-1.amazonaws.com
April 14, 2016

ec2-54-84-187-203.compute-1.amazonaws.com
April 4, 2016

ec2-52-22-129-36.compute-1.amazonaws.com
February 16, 2016

ec2-52-20-41-248.compute-1.amazonaws.com
January 27, 2016

ec2-52-20-182-179.compute-1.amazonaws.com
January 5, 2016

ec2-52-20-167-28.compute-1.amazonaws.com
November 13, 2015

ec2-52-2-5-65.compute-1.amazonaws.com
October 12, 2015

ec2-54-173-230-197.compute-1.amazonaws.com
June 30, 2015

ec2-50-19-244-90.compute-1.amazonaws.com
February 14, 2015

ec2-50-16-246-149.compute-1.amazonaws.com
November 10, 2014

ec2-107-21-120-240.compute-1.amazonaws.com
October 24, 2014

File downloads found at URLs served by downloadacer.com.

The following 3 files have been seen to comunicate with downloadacer.com in live environments.

URL:
http://downloadacer.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)