downloadair.com
FUSION INSTALL (via a Proxy Registrant)
Domain Information
The domain downloadair.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in January of 2014. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform. The domain is associated with the publisher FUSION INSTALL who is located in Kansas City, Missouri in the United States.
Registrar:
TUCOWS DOMAINS INC.
Server location:
Virginia, United States (US)
Create date:
Tuesday, January 14, 2014
Expires date:
Saturday, January 14, 2017
Updated date:
Wednesday, January 13, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.BootCompute.F, PUP.Adknowledge.BootCompute.Bundler (M), PUP.Adknowledge.BootComp.Bundler (M), PUP.Adknowledge.INSTALLT.Installer (M), PUP.Softpulse (M)
100.00%
Emsisoft Anti-Malware
Gen:Variant.Kazy.439479
36.36%
VIPRE Antivirus
Threat.4778314
36.36%
Lavasoft Ad-Aware
Gen:Variant.Kazy.439479
36.36%
Sophos
iBryte Optimum Installer, PUA.iBryte Optimum Installer
36.36%
Comodo Security
Application.Win32.AgentCV.HWYE
36.36%
F-Secure
Gen:Variant.Kazy.439479
36.36%
Avira AntiVirus
TR/Kazy.439479.2
36.36%
Panda Antivirus
Trj/Genetic.gen
36.36%
ESET NOD32
Win32/AdWare.iBryte.BD (variant)
36.36%
AVG
Adware AdPlugin.AAZ
36.36%
MicroWorld eScan
Trojan.GenericKD.1618449, Gen:Variant.Kazy.439479
36.36%
nProtect
Trojan.GenericKD.1618449
36.36%
McAfee
Artemis!0FF2B0F7AD04
36.36%
Malwarebytes
PUP.Optional.GigaClicks.A
36.36%
The domain downloadair.com has been seen to resolve to the following 7 IP addresses.
ec2-54-210-180-22.compute-1.amazonaws.com
May 16, 2016
ec2-54-84-187-203.compute-1.amazonaws.com
April 20, 2016
ec2-52-20-167-28.compute-1.amazonaws.com
December 23, 2015
ec2-52-20-182-179.compute-1.amazonaws.com
December 15, 2015
ec2-52-2-5-65.compute-1.amazonaws.com
August 27, 2015
ec2-50-16-246-149.compute-1.amazonaws.com
August 28, 2014
ec2-54-243-162-14.compute-1.amazonaws.com
May 8, 2014
File downloads found at URLs served by downloadair.com.
The following 3 files have been seen to comunicate with downloadair.com in live environments.
Subdomains
URL:
http://downloadair.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)
Related Domains
