install.webinternetsecurity.com
Contact Privacy Inc. Customer 0136117767 (Proxy Registrant)
Domain Information
The domain install.webinternetsecurity.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in November of 2013. Currently this domain has been known to host various forms of malware. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Contact Privacy Inc. Customer 0136117767
Registrar:
TUCOWS DOMAINS INC.
Server location:
Virginia, United States (US)
Create date:
Monday, November 25, 2013
Expires date:
Tuesday, November 25, 2014
Updated date:
Monday, November 25, 2013
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Malware distribution (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Webinternetsecurity.Startup.CC, Threat.Win.Reputation.IMP
100.00%
Trend Micro House Call
TROJ_GEN.F47V0206
50.00%
Sophos
Mal/Generic-S
50.00%
The domain install.webinternetsecurity.com has been seen to resolve to the following 2 IP addresses.
ec2-50-17-232-156.compute-1.amazonaws.com
August 29, 2016
ec2-54-225-153-46.compute-1.amazonaws.com
May 16, 2014
File downloads found at URLs served by install.webinternetsecurity.com.
URL:
http://install.webinternetsecurity.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)
