intva19.computedomain.info

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain intva19.computedomain.info is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Vitallia.LeftClickMedia.Installer (M), PUP.DownloadAdmin.RedLightMedia.Installer (M), PUP.Vitallia.LeftClick.Bundler.Installer.Meta (M)
100.00%

MicroWorld eScan
Gen:Trojan.Heur.JP.3q3@a0@9MBei
33.33%

Bitdefender
Gen:Trojan.Heur.JP.3q3@a0@9MBei
33.33%

Lavasoft Ad-Aware
Gen:Trojan.Heur.JP.3q3@a0@9MBei
33.33%

Emsisoft Anti-Malware
Gen:Trojan.Heur.JP.3q3@a0@9MBei
33.33%

F-Secure
Gen:Trojan.Heur.JP.3q3@a0@9MBei
33.33%

Avira AntiVirus
TR/ATRAPS.Gen2
33.33%

G Data
Gen:Trojan.Heur.JP.3q3@a0@9MBei
33.33%

ESET NOD32
Win32/DownloadAdmin.Q potentially unwanted (variant)
33.33%

IKARUS anti.virus
PUA.DownloadAdmin
33.33%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
33.33%

VIPRE Antivirus
Threat.4150696
33.33%

Norman
Gen:Trojan.Heur.JP.3q3@a0Mc86hi
33.33%

The domain intva19.computedomain.info has been seen to resolve to the following IP address.

ec2-52-71-232-213.compute-1.amazonaws.com
April 4, 2016

File downloads found at URLs served by intva19.computedomain.info.

 
Latest 30 of 163 download URLs

The following file have been seen to comunicate with intva19.computedomain.info in live environments.

URL:
http://intva19.computedomain.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Jetty(9.3.z-SNAPSHOT)