accounts.speedypassword.com

Paretologic Inc.

Domain Information

The domain accounts.speedypassword.com registered by Paretologic Inc. was initially registered in September of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Friday, September 6, 2013

Expires date:
Tuesday, September 6, 2016

Updated date:
Sunday, September 6, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic
100.00%

The domain accounts.speedypassword.com has been seen to resolve to the following 2 IP addresses.

ec2-50-19-244-178.compute-1.amazonaws.com
May 20, 2016

ec2-107-21-103-64.compute-1.amazonaws.com
May 20, 2016

File downloads found at URLs served by accounts.speedypassword.com.

1 / 68      (PUP)

URL:
http://accounts.speedypassword.com/

Title:
“Login - SpeedyPassword”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=accounts.speedypassword.com, O=Paretologic Inc, L=Victoria, S=British Columbia, C=CA, PostalCode=V8R 1J6, STREET=1827 Fort St, SERIALNUMBER=BC0684985, OID.1.3.6.1.4.1.311.60.2.1.2=British Columbia, OID.1.3.6.1.4.1.311.60.2.1.3=CA, OID.2.5.4.15=Private Organization

SSL certificate issuer:
CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)