www.autojuly112-ml-download.biz
WhoisGuard, Inc. (Proxy Registrant)
Domain Information
The domain www.autojuly112-ml-download.biz is registered by proxy through ENOM, INC. and was originally registered in April of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
WhoisGuard, Inc.
Server location:
Virginia, United States (US)
Create date:
Thursday, April 30, 2015
Expires date:
Friday, April 29, 2016
Updated date:
Thursday, April 30, 2015
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (90% detected)
Scan engine
Details
Detections
Reason Heuristics
Adware.Amonetize (M), Adware.Amonetize.Meta (M)
100.00%
The domain www.autojuly112-ml-download.biz has been seen to resolve to the following 4 IP addresses.
ec2-54-235-156-186.compute-1.amazonaws.com
August 11, 2015
ec2-50-16-216-75.compute-1.amazonaws.com
July 19, 2015
ec2-54-227-247-31.compute-1.amazonaws.com
July 7, 2015
File downloads found at URLs served by www.autojuly112-ml-download.biz.
1 / 68 (PUP)
http://www.autojuly112-ml-download.biz/tdownload.php?version=1.1.6.20&campid=6092&prefix=Reggaeton Mix Vol 2 HD Daddy Yankee, Nicky Jam, J Alvarez, Plan B, Farruko, Zion, Yandel, Arcangel.mp3&instid[appname]=Reggaeton Mix Vol 2 HD Daddy Yankee, Nicky Jam, J Alvarez, Plan B, Farruko, Zion, Yandel, Arcangel.mp3&q=Reggaeton Mix Vol 2 HD Daddy Yankee, Nicky Jam, J Alvarez, Plan B, Farruko, Zion, Yandel, Arcangel.mp3&s1=87c7d459903ce3acfc426395eed474f0f7555d89&t1=1440145663 (042fdea5ade60f1334568176092724a6)
Latest 30 of 1,674 download URLs
URL:
http://www.autojuly112-ml-download.biz/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Apache/2.2.15 (Red Hat) (PHP/5.3.3)
