download.download-tuxpaint.com
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain download.download-tuxpaint.com is registered by proxy through ENOM, INC. and was originally registered in February of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
WHOISGUARD, INC.
Server location:
Virginia, United States (US)
Create date:
Thursday, February 14, 2013
Expires date:
Saturday, February 14, 2015
Updated date:
Wednesday, January 15, 2014
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.installCore.Directio.Installer (M)
83.33%
Malwarebytes
PUP.Optional.InstallCore
16.67%
K7 AntiVirus
Unwanted-Program
16.67%
Agnitum Outpost
PUA.InstallCore
16.67%
Dr.Web
Trojan.Packed.24524
16.67%
VIPRE Antivirus
InstallCore
16.67%
Avira AntiVirus
ADWARE/InstallCore.Gen7
16.67%
Vba32 AntiVirus
Downware.InstallCore
16.67%
ESET NOD32
Win32/InstallCore.BY potentially unwanted application
16.67%
Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
16.67%
SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
16.67%
Kaspersky
Packed.Win32.Krap
16.67%
The domain download.download-tuxpaint.com has been seen to resolve to the following IP address.
ec2-23-23-240-198.compute-1.amazonaws.com
August 17, 2014
File downloads found at URLs served by download.download-tuxpaint.com.
URL:
http://download.download-tuxpaint.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx (PHP/5.5.9-1ubuntu4.3)
