intva31.controlemail.info

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain intva31.controlemail.info is registered by proxy through GoDaddy.com, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Malware distribution  (67% detected)

Scan engine
Details
Detections

Microsoft Security Essentials
Worm:Win32/NeksMiner.A, Threat.Undefined
66.67%

F-Secure
Application:W32/Generic.70053c248f!Online
33.33%

MicroWorld eScan
Gen:Variant.Application.Razy.73471
33.33%

G Data
Gen:Variant.Application.Razy.73471
33.33%

Bitdefender
Gen:Variant.Application.Razy.73471
33.33%

Lavasoft Ad-Aware
Gen:Variant.Application.Razy.73471
33.33%

F-Secure
Gen:Variant.Application.Razy
33.33%

Arcabit
Trojan.Application.Razy.D11EFF
33.33%

AhnLab V3 Security
Malware/Gen.Generic.C1472348
33.33%

IKARUS anti.virus
PUA.DownloadAdmin
33.33%

Panda Antivirus
Trj/Genetic.gen
33.33%

Qihoo 360 Security
HEUR/QVM20.1.0000.Malware.Gen
33.33%

Emsisoft Anti-Malware
Win32.Runouce.B@mm
33.33%

F-Prot
W32/Thecid.B@mm
33.33%

avast!
Win32:Oncer
33.33%

The domain intva31.controlemail.info has been seen to resolve to the following IP address.

ec2-52-72-142-4.compute-1.amazonaws.com
July 28, 2016

File downloads found at URLs served by intva31.controlemail.info.

 
Latest 30 of 39 download URLs

The following 10 files have been seen to comunicate with intva31.controlemail.info in live environments.

URL:
http://intva31.controlemail.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Jetty(9.3.z-SNAPSHOT)