i1.positiveking.net
Gal Pevman
Domain Information
The domain i1.positiveking.net registered by Gal Pevman was initially registered in December of 2014 through 1&1 INTERNET SE. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
1&1 INTERNET SE
Server location:
Oregon, United States (US)
Create date:
Monday, December 22, 2014
Expires date:
Thursday, December 22, 2016
Updated date:
Thursday, February 18, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.EZDownloader.Installer.M, Threat.Win.Reputation, Adware.SInstaller.I, PUP.Optional.PCBackupSoftwareLimited.K
100.00%
Bkav FE
W32.Clodd3f.Trojan, HW32.Stranacty
50.00%
XVirus List
Win.Detected
50.00%
Dr.Web
Trojan.Searcher.1197, riskware program Program.Unwanted.75
50.00%
ESET NOD32
Win32/SProtector.M potentially unwanted application, MSIL/MyPCBackup.B potentially unwanted application
50.00%
Malwarebytes
PUP.Optional.EZDownloader.A
25.00%
Trend Micro House Call
TROJ_GEN.F47V0611
25.00%
Norman
Suspicious_Gen2.VNFHM
25.00%
ESET NOD32
Win32/Duckegg
25.00%
Baidu Antivirus
Trojan.Win32.Duckegg
25.00%
Vba32 AntiVirus
SScope.Malware-Cryptor.SProtector
25.00%
Emsisoft Anti-Malware
Application.MPlug
25.00%
F-Prot
W32/Multiplug.C
25.00%
VIPRE Antivirus
Threat.4150696
25.00%
The domain i1.positiveking.net has been seen to resolve to the following IP address.
ec2-54-191-15-203.us-west-2.compute.amazonaws.com
February 20, 2016
File downloads found at URLs served by i1.positiveking.net.
The following 3 files have been seen to comunicate with i1.positiveking.net in live environments.
