lps.ezdownloadpro.info

Rafael Leviev

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter. The domain is associated with the publisher Rafael Leviev who is located in Shfela, Israel.
Registrar:
1API GmbH

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Malware distribution  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, Adware.Generic.AT (M), PUP (M), Adware.Bundler
100.00%

AVG
Adware Generic6.PXR
2.04%

avast!
Win32:FakeDownload-E [PUP]
2.04%

Emsisoft Anti-Malware
Gen:Variant.Razy.5640
2.04%

Norman
Gen:Variant.Razy.5640
2.04%

The domain lps.ezdownloadpro.info has been seen to resolve to the following 7 IP addresses.

June 18, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 24, 2016

February 15, 2016

January 6, 2016

ec2-54-213-72-9.us-west-2.compute.amazonaws.com
May 5, 2015

ec2-54-68-13-248.us-west-2.compute.amazonaws.com
May 5, 2015

ec2-54-200-195-191.us-west-2.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by lps.ezdownloadpro.info.

 
Latest 30 of 659 download URLs

The following 219 files have been seen to comunicate with lps.ezdownloadpro.info in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 223 files

URL:
http://lps.ezdownloadpro.info/

Title:
“ezdownloadpro.info”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx