a.cafeisosticker.com
Eduard Vasilyev
Domain Information
The domain a.cafeisosticker.com registered by Eduard Vasilyev was initially registered in May of 2015 through ONLINENIC, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
Eduard Vasilyev
Registrar:
ONLINENIC, INC.
Server location:
Oregon, United States (US)
Create date:
Sunday, May 17, 2015
Expires date:
Tuesday, May 17, 2016
Updated date:
Monday, May 18, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
K7 AntiVirus
Unwanted-Program
100.00%
ESET NOD32
Win32/Adware.MultiPlug.MN
100.00%
avast!
Win32:MultiPlug-AAE [PUP]
100.00%
Avira AntiVirus
TR/Crypt.XPACK.Gen
100.00%
Vba32 AntiVirus
suspected of Heur.Malware-Cryptor.Multiplug
100.00%
Reason Heuristics
Threat.Win.Reputation.IMP
100.00%
F-Secure
Gen:Variant.Adware.MPLug
100.00%
Emsisoft Anti-Malware
Gen:Variant.Adware.MPLug.50
100.00%
Norman
Gen:Variant.Adware.MPLug.50
100.00%
Malwarebytes
PUP.Optional.MultiPlug
100.00%
The domain a.cafeisosticker.com has been seen to resolve to the following 3 IP addresses.
ec2-54-213-72-9.us-west-2.compute.amazonaws.com
June 19, 2015
ec2-54-200-195-191.us-west-2.compute.amazonaws.com
June 19, 2015
ec2-54-68-13-248.us-west-2.compute.amazonaws.com
June 19, 2015
File downloads found at URLs served by a.cafeisosticker.com.
The following 4 files have been seen to comunicate with a.cafeisosticker.com in live environments.
URL:
http://a.cafeisosticker.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
