hfs.ezdownloadpro.info

Rafael Leviev

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter. The domain is associated with the publisher Rafael Leviev who is located in Shfela, Israel.
Registrar:
Active Registrar, Inc.

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPLug.35
18.18%

F-Secure
Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPLug
18.18%

ESET NOD32
Win32/Adware.MultiPlug.FC application
18.18%

Lavasoft Ad-Aware
Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPLug.35
18.18%

MicroWorld eScan
Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPLug.35
18.18%

K7 AntiVirus
Unwanted-Program
18.18%

Bitdefender
Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPLug.35
18.18%

Comodo Security
Application.Win32.AdWare.MultiPlug.VA
18.18%

G Data
Gen:Variant.Adware.Mikey.8516, Gen:Variant.Adware.MPLug.35
18.18%

AhnLab V3 Security
PUP/Win32.MultiPlug
18.18%

McAfee
MultiPlug-FWG, Trojan.PWS-Zbot.gen.ep
18.18%

Vba32 AntiVirus
SScope.Adware.MultiPlug
18.18%

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48, PE:AdWare.Win32.MultiPlug.s!1075356738
18.18%

Dr.Web
Trojan.DownLoader12.30773, Trojan.Crossrider1.20508
18.18%

The domain hfs.ezdownloadpro.info has been seen to resolve to the following 8 IP addresses.

June 24, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
June 6, 2016

June 2, 2016

ec2-52-27-128-59.us-west-2.compute.amazonaws.com
December 17, 2015

ec2-52-27-128-56.us-west-2.compute.amazonaws.com
December 17, 2015

ec2-52-27-128-62.us-west-2.compute.amazonaws.com
December 17, 2015

ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 6, 2015

ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 6, 2015

File downloads found at URLs served by hfs.ezdownloadpro.info.

The following 220 files have been seen to comunicate with hfs.ezdownloadpro.info in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 225 files