The domain cdn4.vitaldownload.com is registered by proxy through Moniker Online Services and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
Moniker Privacy Services
Registrar:
Moniker Online Services
Server location:
Virginia, United States (US)
Create date:
Wednesday, July 31, 2013
Expires date:
Sunday, July 31, 2016
Updated date:
Wednesday, July 1, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
avast!
Win32:Dropper-gen [Drp], Win32:Amonetize-FS [PUP], Win32:Adware-gen [Adw]
100.00%
Baidu Antivirus
Adware.Win32.Amonetize
100.00%
AhnLab V3 Security
PUP/Win32.Bundler
66.67%
Reason Heuristics
Threat.Win.Reputation.IMP
66.67%
Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen, Win32/Virus.Adware.932
66.67%
MicroWorld eScan
Trojan.GenericKD.2079556, Trojan.Generic.12525559, Gen:Variant.Graftor.179369, Gen:Variant.Graftor.171667
66.67%
McAfee
RDN/Generic PUP.x!cs3, RDN/Generic PUP.x!csh, Artemis!C449D732F552
66.67%
Bitdefender
Trojan.GenericKD.2079556, Trojan.Generic.12525559, Gen:Variant.Graftor.179369, Gen:Variant.Graftor.171667
66.67%
Agnitum Outpost
PUA.Amonetize
66.67%
Trend Micro House Call
TROJ_GEN.F0C2C00AO15, Suspicious_GEN.F47V0111, Suspicious_GEN.F47V0312, TROJ_GEN.R04AC0EAN15
66.67%
Lavasoft Ad-Aware
Trojan.GenericKD.2079556, Trojan.Generic.12525559, Gen:Variant.Graftor.179369, Gen:Variant.Graftor.171667
66.67%
Emsisoft Anti-Malware
Trojan.GenericKD.2079556, Trojan.Generic.12525559, Adware.Generic.1166602, Gen:Variant.Graftor.171667
66.67%
F-Secure
Trojan.GenericKD.2079556, Trojan.Generic.12525559, Gen:Variant.Graftor.179369, Gen:Variant.Graftor.171667
66.67%
VIPRE Antivirus
Trojan.Win32.Generic
66.67%
Sophos
Generic PUA HC, Generic PUA KP, Generic PUA AG, Generic PUA JF
66.67%
The domain cdn4.vitaldownload.com has been seen to resolve to the following 47 IP addresses.
server-52-84-125-141.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-125.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-28.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-237.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-203.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-180.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-159.iad16.r.cloudfront.net
August 22, 2016
server-52-84-125-150.iad16.r.cloudfront.net
August 22, 2016
server-52-85-142-234.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-231.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-218.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-196.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-110.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-108.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-87.iad12.r.cloudfront.net
May 20, 2016
server-52-85-142-239.iad12.r.cloudfront.net
May 20, 2016
server-54-240-160-117.iad12.r.cloudfront.net
February 28, 2016
server-54-240-160-83.iad12.r.cloudfront.net
February 28, 2016
server-54-240-160-247.iad12.r.cloudfront.net
February 28, 2016
server-54-240-160-228.iad12.r.cloudfront.net
February 28, 2016
server-54-240-160-194.iad12.r.cloudfront.net
February 28, 2016
server-54-240-160-187.iad12.r.cloudfront.net
February 28, 2016
server-54-240-160-152.iad12.r.cloudfront.net
February 28, 2016
server-54-192-195-165.iad53.r.cloudfront.net
February 17, 2016
server-54-192-195-122.iad53.r.cloudfront.net
February 17, 2016
server-54-192-195-115.iad53.r.cloudfront.net
February 17, 2016
server-54-192-195-111.iad53.r.cloudfront.net
February 17, 2016
server-54-192-195-107.iad53.r.cloudfront.net
February 17, 2016
server-54-192-195-32.iad53.r.cloudfront.net
February 17, 2016
server-54-192-195-250.iad53.r.cloudfront.net
February 17, 2016
Showing 30 of 47 IP Addresses
File downloads found at URLs served by cdn4.vitaldownload.com.
The following 38 files have been seen to comunicate with cdn4.vitaldownload.com in live environments.
URL:
http://cdn4.vitaldownload.com/
Network:
Amazon Cloudfront