win.updatergo.com
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain win.updatergo.com is registered by proxy through ENOM, INC. and was originally registered in November of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
WHOISGUARD, INC.
Server location:
Virginia, United States (US)
Create date:
Monday, November 17, 2014
Expires date:
Tuesday, November 17, 2015
Updated date:
Monday, November 17, 2014
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Google Safe Browsing:
unwanted
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
MicroWorld eScan
Dropped:Trojan.GenericKD.2032519
100.00%
Norman
Downloader.HLAO
100.00%
Trend Micro House Call
Suspicious_GEN.F47V1217
100.00%
avast!
Win32:Malware-gen
100.00%
Kaspersky
Trojan-Downloader.Win32.Genome
100.00%
Bitdefender
Dropped:Trojan.GenericKD.2032519
100.00%
Lavasoft Ad-Aware
Dropped:Trojan.GenericKD.2032519
100.00%
Emsisoft Anti-Malware
Dropped:Trojan.GenericKD.2032519
100.00%
F-Secure
Dropped:Trojan.GenericKD.2032519
100.00%
Dr.Web
Trojan.DownLoader11.51175
100.00%
VIPRE Antivirus
Trojan.Win32.Generic
100.00%
Sophos
Mal/Generic-S
100.00%
Avira AntiVirus
TR/Dldr.Megone.122712
100.00%
G Data
Dropped:Trojan.GenericKD.2032519
100.00%
AhnLab V3 Security
PUP/Win32.Agent
100.00%
The domain win.updatergo.com has been seen to resolve to the following 2 IP addresses.
ec2-23-21-113-231.compute-1.amazonaws.com
May 4, 2015
ec2-107-20-247-247.compute-1.amazonaws.com
May 4, 2015
File downloads found at URLs served by win.updatergo.com.
URL:
http://win.updatergo.com/
Title:
“Critical Software May Be Out Of Date”
Network:
Amazon Web Services (AWS), running an EC2 instance
