a.engineer-pro.net
Tzvika Vakin
Domain Information
The domain a.engineer-pro.net registered by Tzvika Vakin was initially registered in May of 2015 through ONLINENIC, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ONLINENIC, INC.
Server location:
Oregon, United States (US)
Create date:
Monday, May 11, 2015
Expires date:
Wednesday, May 11, 2016
Updated date:
Tuesday, May 12, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Optional.PCUtilities.Task.Meta (M), PUP.Optional.PCUtilities (M)
100.00%
ESET NOD32
Win32/Adware.MultiPlug.MF application
50.00%
McAfee
Program.MultiPlug-FWG
50.00%
avast!
Win32:MultiPlug-ZC [PUP], Win32:FakeDownload-F [PUP]
50.00%
Sophos
PUA 'MultiPlug' (of type Adware)
50.00%
K7 AntiVirus
Unwanted-Program
50.00%
Avira AntiVirus
TR/Crypt.XPACK.Gen
50.00%
AhnLab V3 Security
PUP/Win32.MultiPlug
50.00%
Vba32 AntiVirus
suspected of Heur.Malware-Cryptor.Multiplug
50.00%
IKARUS anti.virus
PUA.Win32.InstalleRex
50.00%
Fortinet FortiGate
Riskware/Generic.AC.4386
50.00%
Zillya! Antivirus
Adware.MultiPlugGen.Win32.1
40.00%
Emsisoft Anti-Malware
Gen:Trojan.Heur.RP.pzW@a0nv6Tci, Gen:Trojan.Heur.RP.pzW@a0FytRki, Adware.Agent.PQC, Adware.MultiPlug.LE
40.00%
F-Secure
Gen:Trojan.Heur.RP.pzW@a0nv6Tci, Gen:Trojan.Heur.RP.pzW@a0FytRki, Adware.Agent.PQC, Adware.MultiPlug.LE
40.00%
Norman
Gen:Trojan.Heur.RP.pzW@a0nv6Tci, Gen:Trojan.Heur.RP.pzW@a0FytRki, Adware.Agent.PQC, Adware.MultiPlug.LE
40.00%
The domain a.engineer-pro.net has been seen to resolve to the following 9 IP addresses.
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-27-23-115.us-west-2.compute.amazonaws.com
June 30, 2015
ec2-52-11-167-137.us-west-2.compute.amazonaws.com
June 30, 2015
ec2-54-213-72-9.us-west-2.compute.amazonaws.com
June 19, 2015
ec2-54-200-195-191.us-west-2.compute.amazonaws.com
June 19, 2015
ec2-54-68-13-248.us-west-2.compute.amazonaws.com
June 19, 2015
File downloads found at URLs served by a.engineer-pro.net.
The following 6 files have been seen to comunicate with a.engineer-pro.net in live environments.
URL:
http://a.engineer-pro.net/
Network:
Amazon Web Services (AWS), running an EC2 instance
