The domain v4securedownload.com registered by Whois Privacy Corp. was initially registered in April of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrant:
Whois Privacy Corp.
Registrar:
TLD REGISTRAR SOLUTIONS LTD
Server location:
Dublin City, Ireland (IE)
Create date:
Wednesday, April 15, 2015
Expires date:
Friday, April 15, 2016
Updated date:
Wednesday, April 15, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.
Scanner detections:
Detections (82% detected)
Scan engine
Details
Detections
Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Amonetize (M), Adware.Amonetize, Adware.Amonetize.ET (M)
56.25%
Emsisoft Anti-Malware
Gen:Heur.Kelios, Gen:Variant.Mikey.28462, Gen:Variant.Strictor.101631, Trojan.GenericKD.3004367, Gen:Variant.Strictor.101972, Adware.Generic.1488556
37.50%
ESET NOD32
Win32/Amonetize.LB potentially unwanted application, Win32/Amonetize.KJ potentially unwanted application, Win32/Amonetize.OP potentially unwanted application
31.25%
VIPRE Antivirus
Amonetize, Threat.4150696, Threat.4785227
31.25%
avast!
Win32:Adware-gen [Adw], Dropper-gen [Drp], Win32:Dropper-gen [Drp]
25.00%
Norman
Gen:Variant.Strictor.101631, Trojan.GenericKD.3004367, Gen:Variant.Strictor.101972, Gen:Application.Imonetize.2
25.00%
F-Secure
Application:W32/Generic.70053c248f!Online, Trojan.GenericKD.3004367, Variant.Jaik.10209
18.75%
Malwarebytes
PUP.Optional.Amonetize
18.75%
Baidu Antivirus
PUA.Win32.Amonetize
18.75%
Dr.Web
infected with Trojan.Amonetize.10964, infected with Trojan.Amonetize.10208, Trojan.Amonetize.12219
18.75%
AVG
Generic, Adload, Adware BundleApp.SJW
18.75%
Avira AntiVirus
ADWARE/Adware.Gen2, ADWARE/Amonetize.Gen
12.50%
Rising Antivirus
PE:Malware.RDM.14!5.14[F1], PE:Malware.Generic/QRS!1.9E2D [F]
12.50%
Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
12.50%
Fortinet FortiGate
Riskware/Amonetize, Riskware/Agent
12.50%
The domain v4securedownload.com has been seen to resolve to the following 4 IP addresses.
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
July 14, 2016
File downloads found at URLs served by v4securedownload.com.
The following 215 files have been seen to comunicate with v4securedownload.com in live environments.
URL:
http://v4securedownload.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
SSL certificate subject:
CN=sni46502.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
cloudflare-nginx