intva31.controlemail.info
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain intva31.controlemail.info is registered by proxy through GoDaddy.com, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GoDaddy.com, LLC
Server location:
Virginia, United States (US)
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Malware distribution (67% detected)
Scan engine
Details
Detections
Microsoft Security Essentials
Worm:Win32/NeksMiner.A, Threat.Undefined
66.67%
F-Secure
Application:W32/Generic.70053c248f!Online
33.33%
MicroWorld eScan
Gen:Variant.Application.Razy.73471
33.33%
G Data
Gen:Variant.Application.Razy.73471
33.33%
Bitdefender
Gen:Variant.Application.Razy.73471
33.33%
Lavasoft Ad-Aware
Gen:Variant.Application.Razy.73471
33.33%
F-Secure
Gen:Variant.Application.Razy
33.33%
Arcabit
Trojan.Application.Razy.D11EFF
33.33%
AhnLab V3 Security
Malware/Gen.Generic.C1472348
33.33%
IKARUS anti.virus
PUA.DownloadAdmin
33.33%
Panda Antivirus
Trj/Genetic.gen
33.33%
Qihoo 360 Security
HEUR/QVM20.1.0000.Malware.Gen
33.33%
Emsisoft Anti-Malware
Win32.Runouce.B@mm
33.33%
F-Prot
W32/Thecid.B@mm
33.33%
The domain intva31.controlemail.info has been seen to resolve to the following IP address.
ec2-52-72-142-4.compute-1.amazonaws.com
July 28, 2016
File downloads found at URLs served by intva31.controlemail.info.
Latest 30 of 39 download URLs
The following 10 files have been seen to comunicate with intva31.controlemail.info in live environments.
URL:
http://intva31.controlemail.info/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Jetty(9.3.z-SNAPSHOT)
