The domain engenhariatm.com registered by JAKSON SANTOS DIAS was initially registered in September of 2015 through UNIVERSO ONLINE S/A (UOL). Currently this domain has been known to host various forms of malware. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrant:
JAKSON SANTOS DIAS
Registrar:
UNIVERSO ONLINE S/A (UOL)
Server location:
Arizona, United States (US)
Create date:
Monday, September 14, 2015
Expires date:
Wednesday, September 14, 2016
Updated date:
Monday, January 11, 2016
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Scanner detections:
Malware distribution (60% detected)
Scan engine
Details
Detections
Emsisoft Anti-Malware
Gen:Variant.Kazy.740924, Trojan.GenericKD.2824808, Gen:Variant.Graftor.254336, Gen:Variant.Zusy.175672, Gen:Variant.MSILPerseus.8820, Gen:Variant.MSILPerseus.6528, Gen:Variant.Kazy.717227, Gen:Trojan.Heur2.CTR.2jG4@aGxKmSei, Gen:Variant.Kazy.763549, Gen:Variant.Kazy.601782, Gen:Variant.Zusy.176911
69.39%
AVG
Generic14_c, Win32/Blacked, Win32/Blacked.dropper, Win32/Ramnit.A, Generic31, Atros3
53.06%
MicroWorld eScan
Gen:Variant.Kazy.740924, Trojan.GenericKD.2824808, Gen:Variant.Graftor.254336, Gen:Variant.Kazy.763408, Trojan.GenericKD.2838308, Gen:Variant.Symmi.59837, Gen:Variant.Zusy.176911, Gen:Variant.Kazy.638297, Gen:Variant.Kazy.717227, Trojan.GenericKD.2817633, Gen:Variant.MSILPerseus.6528
38.78%
Bitdefender
Gen:Variant.Kazy.740924, Trojan.GenericKD.2824808, Gen:Variant.Graftor.254336, Gen:Variant.Kazy.763408, Trojan.GenericKD.2838308
38.78%
Arcabit
Trojan.Kazy.DB4E3C, Trojan.Generic.D2B1A68, Trojan.Graftor.D3E180, Trojan.Kazy.DBA610, Trojan.Generic.D2B4F24, Trojan.Symmi.DE9BD
38.78%
G Data
Gen:Variant.Kazy.740924, Trojan.GenericKD.2824808, Gen:Variant.Graftor.254336, Gen:Variant.Kazy.763408, Trojan.GenericKD.2838308
38.78%
F-Secure
Trojan.GenericKD.2824808, Gen:Variant.Graftor.254336, Gen:Variant.Kazy.763408, Trojan.GenericKD.2838308, Gen:Variant.Symmi.59837
36.73%
Norman
Gen:Variant.Kazy.740924, Gen:Variant.Zusy.175672, Gen:Variant.MSILPerseus.8820, Win32.Ramnit, Gen:Variant.MSILPerseus.6528, Gen:Variant.Razy.6911
30.61%
Lavasoft Ad-Aware
Trojan.GenericKD.2824808, Gen:Variant.Graftor.254336, Gen:Variant.Kazy.763408, Trojan.GenericKD.2838308, Gen:Variant.Symmi.59837
30.61%
Avira AntiVirus
TR/Inject.967680, TR/Graftor.1483264.1, TR/Graftor.1429504.32, TR/Inject.942592, TR/Crypt.TPM.Gen, W32/Ramnit.C, TR/Kazy.152576.8
26.53%
Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen, HEUR/QVM17.0.Malware.Gen, Win32/Trojan.9ea, Win32/Trojan.749, HEUR/QVM11.1.Malware.Gen, HEUR/QVM36.0.Malware.Gen
26.53%
McAfee
Artemis!331C194FEE80, Artemis!8F530337C6DB, Artemis!DC10FA96FA79, Artemis!CDF67E3134C3, Virus.W32/Ramnit.a, Artemis!5510C3FF3CBE
22.45%
avast!
Win32:Malware-gen, Win32:Dropper-gen [Drp], Win32:RmnDrp
22.45%
VIPRE Antivirus
Trojan.Win32.Generic, Threat.4726519, Trojan.Win32.Generic.pak!cobra
20.41%
Rising Antivirus
PE:Malware.RDM.40!5.2E[F1], PE:Malware.Generic/QRS!1.9E2D [F], PE:Malware.Generic(Thunder)!1.A1C4 [F], PE:Trojan.Confuser!1.A352 [F]
18.37%
The domain engenhariatm.com has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by engenhariatm.com.
URL:
http://engenhariatm.com/
SSL certificate subject:
CN=sni64934.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
cloudflare-nginx