fasa.vaudix.com

Cyber Soft Group Ltd.

Domain Information

The domain fasa.vaudix.com registered by Cyber Soft Group Ltd. was initially registered in May of 2012 through NETEARTH ONE INC. D/B/A NETEARTH. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
NETEARTH ONE INC. D/B/A NETEARTH

Server location:
Oregon, United States (US)

Create date:
Friday, May 4, 2012

Expires date:
Wednesday, May 4, 2016

Updated date:
Tuesday, April 22, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

Emsisoft Anti-Malware
Adware.Agent.PHV
100.00%

F-Secure
Adware.Agent.PHV
100.00%

Dr.Web
Trojan.Crossrider.36840
100.00%

ESET NOD32
Win32/Adware.MultiPlug.EZ application
100.00%

avast!
Win32:MultiPlug-YD [PUP]
100.00%

McAfee
Program.MultiPlug-FVZ
100.00%

AVG
Adware Generic6.PVG
100.00%

Lavasoft Ad-Aware
Adware.Agent.PHV
100.00%

Bkav FE
HW32.Packed
100.00%

MicroWorld eScan
Adware.Agent.PHV
100.00%

nProtect
Adware.Agent.PHV
100.00%

Malwarebytes
PUP.Optional.MultiPlug
100.00%

F-Prot
W32/MultiPlug.H.gen
100.00%

Kaspersky
HEUR:Trojan.Win32.Generic
100.00%

The domain fasa.vaudix.com has been seen to resolve to the following 2 IP addresses.

ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 6, 2015

ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 6, 2015

File downloads found at URLs served by fasa.vaudix.com.

The following 3 files have been seen to comunicate with fasa.vaudix.com in live environments.

URL:
http://fasa.vaudix.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
openresty