2oqd6.trackvoluum.com

CodeWise spolka z ograniczona odpowiedzialnoscia sp. k.

Domain Information

The domain 2oqd6.trackvoluum.com registered by CodeWise spolka z ograniczona odpowiedzialnoscia sp. k. was initially registered in June of 2013 through DYNADOT, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
DYNADOT, LLC

Server location:
Virginia, United States (US)

Create date:
Friday, June 28, 2013

Expires date:
Wednesday, June 28, 2017

Updated date:
Monday, May 26, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Tightrope, PUP.Tightrope.Sanflex.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
50.00%

VIPRE Antivirus
DownloadAdmin
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Trend Micro House Call
Suspicious_GEN.F47V1210
50.00%

Clam AntiVirus
Win.Adware.Downloadadmin
50.00%

NANO AntiVirus
Riskware.Win32.Downware.djahkt
50.00%

Comodo Security
ApplicUnwnt
50.00%

Dr.Web
Adware.Downware.2220
50.00%

Sophos
PUA 'DownloadAdmin' (of type Adware)
50.00%

Avira AntiVirus
ADWARE/Adware.Gen
50.00%

AhnLab V3 Security
PUP/Win32.Downware
50.00%

G Data
Win32.Application.DownloadAdmin
50.00%

McAfee
Artemis!2D2A5D52A685
50.00%

The domain 2oqd6.trackvoluum.com has been seen to resolve to the following 3 IP addresses.

ec2-52-7-229-133.compute-1.amazonaws.com
October 15, 2015

ec2-52-4-83-252.compute-1.amazonaws.com
October 15, 2015

ec2-54-210-9-221.compute-1.amazonaws.com
October 15, 2015

File downloads found at URLs served by 2oqd6.trackvoluum.com.

1 / 68      (Adware)
http://2oqd6.trackvoluum.com/click  (vlcmediaplayer.exe)

21 / 68    (Adware)

URL:
http://2oqd6.trackvoluum.com/

Title:
“Coming Soon”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=*.trackvoluum.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)13, OU=GT89093649, SERIALNUMBER=tIMieP0cKNC4pSv-3uXEDsTTozrJ1u8p

SSL certificate issuer:
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US

Web server:
Apache/2.4.12