get.mmtrktw.org

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain get.mmtrktw.org is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com (R27-LROR). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com (R27-LROR)

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.OUTBROWSE.F
100.00%

VIPRE Antivirus
Threat.4784459, Threat.4823950
100.00%

Dr.Web
Adware.Downware.2081, Trojan.Packed.28599
100.00%

ESET NOD32
Win32/OutBrowse.W potentially unwanted application
100.00%

McAfee
Adware-OutBrowse
100.00%

Malwarebytes
PUP.Optional.OutBrowse
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Kaspersky
not-a-virus:AdWare.Win32.OutBrowse
100.00%

Avira AntiVirus
APPL/Downloader.Gen, APPL/OutBrowse.lwasp
100.00%

Sophos
OutBrowse Revenyou
100.00%

AhnLab V3 Security
PUP/Win32.OutBrowse
100.00%

AVG
Generic
100.00%

NANO AntiVirus
Trojan.Win32.Generic.dbxkzp
66.67%

Trend Micro House Call
Suspici.B577CD42
66.67%

MicroWorld eScan
MemScan:Application.Bundler.Outbrowse.K
66.67%

The domain get.mmtrktw.org has been seen to resolve to the following 2 IP addresses.

ec2-23-21-145-191.compute-1.amazonaws.com
September 6, 2014

ec2-184-72-220-88.compute-1.amazonaws.com
September 6, 2014

File downloads found at URLs served by get.mmtrktw.org.

URL:
http://get.mmtrktw.org/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.0 (ASP.NET) (Version: 4.0.30319)