admin.jmagno.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain admin.jmagno.com is registered by proxy through GODADDY.COM, LLC and was originally registered in January of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Dublin City, Ireland (IE)

Create date:
Monday, January 11, 2016

Expires date:
Wednesday, January 11, 2017

Updated date:
Saturday, January 23, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (84% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Softpulse.Appsecure.Bundler (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.Softpulse.PLUGINUPDATE.Bundler (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse.Appsecur.Bundler (M)
86.67%

Vba32 AntiVirus
suspected of Malware.JS.Obfuscated
10.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
3.33%

F-Secure
Application:W32/Generic.70053c248f!Online
3.33%

The domain admin.jmagno.com has been seen to resolve to the following 11 IP addresses.

May 19, 2016

April 2, 2016

February 25, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
February 13, 2016

January 4, 2016

ec2-54-149-173-76.us-west-2.compute.amazonaws.com
August 13, 2015

ec2-54-186-105-190.us-west-2.compute.amazonaws.com
August 13, 2015

ec2-54-148-211-142.us-west-2.compute.amazonaws.com
July 15, 2015

ec2-52-26-181-249.us-west-2.compute.amazonaws.com
July 15, 2015

ec2-54-201-67-180.us-west-2.compute.amazonaws.com
July 12, 2015

ec2-54-186-12-226.us-west-2.compute.amazonaws.com
July 12, 2015

File downloads found at URLs served by admin.jmagno.com.

 
Latest 30 of 31 download URLs

The following 216 files have been seen to comunicate with admin.jmagno.com in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 220 files

URL:
http://admin.jmagno.com/

Title:
“Loading”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.14)