ru.download366.info

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain ru.download366.info is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AppsInstallerSL.I, PUP.Solimba.FIRSERIA.Bundler (M), PUP.Solimba.Firseria.Bundler (M), PUP.Solimba.CondestilDevelopments (M), PUP.Solimba.Bechiro.Bundler (M), PUP.Solimba.EilioDevelopmentssl (M), PUP.Solimba.EilioDev (M), PUP.Solimba.AppsInst.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.AppsInstaller
7.69%

VIPRE Antivirus
Trojan.Win32.Generic
7.69%

K7 AntiVirus
Trojan
7.69%

Sophos
Solimba Installer
7.69%

Comodo Security
Application.Win32.FirseriaInstaller.KFA
7.69%

Avira AntiVirus
APPL/Firseria.A.32
7.69%

G Data
Win32.Application.Morstar
7.69%

Vba32 AntiVirus
Downware.Morstar
7.69%

AVG
BundleApp
7.69%

Panda Antivirus
Trj/Genetic.gen
7.69%

The domain ru.download366.info has been seen to resolve to the following 7 IP addresses.

ec2-52-20-26-1.compute-1.amazonaws.com
August 11, 2016

ec2-54-210-177-99.compute-1.amazonaws.com
April 3, 2016

ec2-52-86-173-174.compute-1.amazonaws.com
April 3, 2016

ec2-54-164-36-16.compute-1.amazonaws.com
February 25, 2016

ec2-52-2-153-162.compute-1.amazonaws.com
February 25, 2016

ec2-54-243-100-6.compute-1.amazonaws.com
May 16, 2014

ec2-23-21-247-193.compute-1.amazonaws.com
May 16, 2014

File downloads found at URLs served by ru.download366.info.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

11 / 68    (Adware)

URL:
http://ru.download366.info/

Google Analytics:
UA-18063553

Title:
“Download366”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx