i1.scanwebresolver.com

Felix Meduzku

Domain Information

The domain i1.scanwebresolver.com registered by Felix Meduzku was initially registered in May of 2015 through ONLINENIC, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ONLINENIC, INC.

Server location:
Oregon, United States (US)

Create date:
Saturday, May 16, 2015

Expires date:
Tuesday, May 16, 2017

Updated date:
Tuesday, May 17, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
HW32.Stranacty
100.00%

Dr.Web
Trojan.Searcher.1197
100.00%

Reason Heuristics
Adware.SInstaller.I
100.00%

Vba32 AntiVirus
SScope.Malware-Cryptor.SProtector
100.00%

XVirus List
Win.Detected
100.00%

ESET NOD32
Win32/SProtector.M potentially unwanted application
100.00%

Emsisoft Anti-Malware
Application.MPlug
100.00%

F-Prot
W32/Multiplug.C
100.00%

The domain i1.scanwebresolver.com has been seen to resolve to the following IP address.

ec2-54-191-15-203.us-west-2.compute.amazonaws.com
May 18, 2016

File downloads found at URLs served by i1.scanwebresolver.com.

8 / 68      (Adware)
http://i1.scanwebresolver.com/.../sinstall.exe  (71c2ea2b936ba80f4bad80937b369adf)

The following 3 files have been seen to comunicate with i1.scanwebresolver.com in live environments.

URL:
http://i1.scanwebresolver.com/

Title:
“Apache2 Ubuntu Default Page: It works”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.7 (Ubuntu)