The domain mybluegames.net registered by Beni Sanberg was initially registered in January of 2015 through 1 & 1 INTERNET AG. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
1&1 INTERNET SE
Server location:
Oregon, United States (US)
Create date:
Tuesday, January 13, 2015
Expires date:
Friday, January 13, 2017
Updated date:
Thursday, February 18, 2016
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
Threat.Win.Reputation.IMP, PUP.WebPick, PUP.WebPick.AndreyHmelnikov (M)
100.00%
F-Secure
Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mplug
42.11%
ESET NOD32
Win32/Adware.MultiPlug.ES application, Win32/Adware.MultiPlug.EW application, Win32/Adware.MultiPlug.IU application
42.11%
Emsisoft Anti-Malware
Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mplug.36
42.11%
AVG
Adware Generic6.NLT, Adware Generic6.NNN, Adware Generic6.NMV, Adware Generic6.NMF
42.11%
Lavasoft Ad-Aware
Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mplug.36
42.11%
MicroWorld eScan
Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mplug.36
42.11%
McAfee
Multiplug-FVQ, Program.Multiplug-FVQ, Program.MultiPlug-FXP
42.11%
Bitdefender
Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mplug.36
42.11%
Avira AntiVirus
ADWARE/MultiPlug.Gen7, ADWARE/MultiPlug.Gen4, Adware/MPlug.trou, TR/Crypt.XPACK.Gen
42.11%
AhnLab V3 Security
PUP/Win32.MultiPlug
42.11%
G Data
Gen:Variant.Adware.Kazy.552220, Gen:Variant.Adware.Mikey.7658, Gen:Variant.Adware.Mplug.36
42.11%
Vba32 AntiVirus
suspected of Heur.Malware-Cryptor.Multiplug
42.11%
Bkav FE
HW32.Packed, W32.HfsAdware
36.84%
K7 AntiVirus
Unwanted-Program
36.84%
The domain mybluegames.net has been seen to resolve to the following 6 IP addresses.
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
February 24, 2016
ec2-54-68-13-248.us-west-2.compute.amazonaws.com
May 5, 2015
ec2-54-200-195-191.us-west-2.compute.amazonaws.com
May 5, 2015
ec2-54-213-72-9.us-west-2.compute.amazonaws.com
May 5, 2015
File downloads found at URLs served by mybluegames.net.
The following 6 files have been seen to comunicate with mybluegames.net in live environments.