intva31.droveassociates.info
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain intva31.droveassociates.info is registered by proxy through GoDaddy.com, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GoDaddy.com, LLC
Server location:
Virginia, United States (US)
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Malware distribution (67% detected)
Scan engine
Details
Detections
Microsoft Security Essentials
Worm:Win32/NeksMiner.A, Threat.Undefined
66.67%
avast!
Win32:Malware-gen, Win32:SaliCode
66.67%
Dr.Web
Trojan.Vittalia.8828, Win32.Sector.30
66.67%
F-Secure
Application:W32/Generic.70053c248f!Online
33.33%
Reason Heuristics
PUP.Vitallia.Downtown.Installer (M)
33.33%
Emsisoft Anti-Malware
Win32.Sality
33.33%
ESET NOD32
Win32/Sality.NBA virus
33.33%
F-Prot
W32/Sality.gen2
33.33%
McAfee
Virus.W32/Sality.gen.z
33.33%
VIPRE Antivirus
Threat.4721115
33.33%
Kaspersky
Virus.Win32.Sality
33.33%
Norman
Win32.Sality.3
33.33%
The domain intva31.droveassociates.info has been seen to resolve to the following IP address.
ec2-52-72-142-4.compute-1.amazonaws.com
May 14, 2016
File downloads found at URLs served by intva31.droveassociates.info.
The following 10 files have been seen to comunicate with intva31.droveassociates.info in live environments.
URL:
http://intva31.droveassociates.info/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Jetty(9.3.z-SNAPSHOT)
