admin.magnoela.com

Fred Nurk

Domain Information

The domain admin.magnoela.com registered by Fred Nurk was initially registered in December of 2015 through AMAZON REGISTRAR, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
AMAZON REGISTRAR, INC.

Server location:
Virginia, United States (US)

Create date:
Friday, December 11, 2015

Expires date:
Sunday, December 11, 2016

Updated date:
Friday, December 11, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Softpulse.Sambamedia.Bundler (M), PUP.Softpulse.Sambamed.Bundler (M), PUP.Softpulse.Bundler.Meta (M), PUP.Softpulse.TrustedD.Bundler (M), PUP.Softpulse (M)
98.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.00%

F-Secure
Application:W32/Generic.70053c248f!Online
2.00%

The domain admin.magnoela.com has been seen to resolve to the following 6 IP addresses.

April 17, 2016

ec2-54-175-122-20.compute-1.amazonaws.com
April 17, 2016

ec2-52-4-24-31.compute-1.amazonaws.com
April 16, 2016

ec2-54-84-194-145.compute-1.amazonaws.com
April 16, 2016

ec2-52-35-12-35.us-west-2.compute.amazonaws.com
January 27, 2016

ec2-52-32-68-221.us-west-2.compute.amazonaws.com
January 27, 2016

File downloads found at URLs served by admin.magnoela.com.

 
Latest 30 of 146 download URLs

The following 2 files have been seen to comunicate with admin.magnoela.com in live environments.

URL:
http://admin.magnoela.com/

Title:
“Enjoy the experience”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx