www.autojuly111-ml-download.biz

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain www.autojuly111-ml-download.biz is registered by proxy through ENOM, INC. and was originally registered in April of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Thursday, April 30, 2015

Expires date:
Friday, April 29, 2016

Updated date:
Thursday, April 30, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (74% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), Adware.Amonetize.Meta (M), Adware.Amonetize (M)
78.57%

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.204194
21.43%

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.204194
21.43%

Dr.Web
infected with Trojan.Amonetize.2350
21.43%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
21.43%

Norman
Gen:Variant.Adware.Graftor.204194
21.43%

MicroWorld eScan
Gen:Variant.Adware.Graftor.204194
21.43%

Zillya! Antivirus
Adware.Amonetize.Win32.4747, Adware.Amonetize.Win32.4746
21.43%

Bitdefender
Gen:Variant.Adware.Graftor.204194
21.43%

Arcabit
Trojan.Adware.Graftor.D31DA2
21.43%

NANO AntiVirus
Riskware.Win32.Amonetize.dthswb
21.43%

Trend Micro House Call
TROJ_GE.34AD72B6, TROJ_GE.9B161FDA, TROJ_GE.14FA4A53
21.43%

avast!
Win32:Amonetize-JK [PUP]
21.43%

F-Secure
Gen:Variant.Adware.Graftor
21.43%

VIPRE Antivirus
Amonetize
21.43%

The domain www.autojuly111-ml-download.biz has been seen to resolve to the following 3 IP addresses.

May 17, 2016

ec2-54-235-156-186.compute-1.amazonaws.com
August 11, 2015

ec2-54-227-247-31.compute-1.amazonaws.com
July 7, 2015

File downloads found at URLs served by www.autojuly111-ml-download.biz.

URL:
http://www.autojuly111-ml-download.biz/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.15 (Red Hat) (PHP/5.3.3)