go.pchealthcheckup.net

Fundacion Private Whois  (Proxy Registrant)

Domain Information

The domain go.pchealthcheckup.net is registered by proxy through INTERNET.BS CORP. and was originally registered in December of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
INTERNET.BS CORP.

Server location:
Virginia, United States (US)

Create date:
Wednesday, December 18, 2013

Expires date:
Thursday, December 18, 2014

Updated date:
Sunday, January 5, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

ESET NOD32
MSIL/AdvancedSystemProtector (variant)
100.00%

Reason Heuristics
PUP.Optional.FiorentinoMedia.V
100.00%

Comodo Security
ApplicUnwnt
50.00%

McAfee
Artemis!DAC34D8F024E
50.00%

AVG
Skodna.Generic_c
50.00%

Trend Micro House Call
Suspicious_GEN.F47V0612
50.00%

Dr.Web
Program.Unwanted.40
50.00%

Baidu Antivirus
PUA.MSIL.AdvancedSystemProtector
50.00%

The domain go.pchealthcheckup.net has been seen to resolve to the following 3 IP addresses.

ec2-54-209-80-46.compute-1.amazonaws.com
August 7, 2014

ec2-107-21-51-147.compute-1.amazonaws.com
June 26, 2014

ec2-50-16-213-190.compute-1.amazonaws.com
April 20, 2014

File downloads found at URLs served by go.pchealthcheckup.net.

0 / 68
http://go.pchealthcheckup.net/click  (mbam-setup-consumer-2.0.2.1012.exe)

5 / 68      (PUP)
http://go.pchealthcheckup.net/.../  (antimalware-installer.exe)

5 / 68      (PUP)
http://go.pchealthcheckup.net/click  (antimalware-installer.exe)

5 / 68      (PUP)
http://go.pchealthcheckup.net/click  (antimalware-installer.exe)

URL:
http://go.pchealthcheckup.net/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Voluum-Traffic/1.0