spursx5.tinyboxarcade.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain spursx5.tinyboxarcade.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Wednesday, March 11, 2015

Expires date:
Saturday, March 11, 2017

Updated date:
Saturday, March 12, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Injekt.RatioApplications.Installer (M), PUP.Conduit.ClientConnect.Installer (M)
91.30%

VIPRE Antivirus
Threat.4150696, Injekt, Threat.5217618
17.39%

Dr.Web
Adware.Downware.3968, Adware.Yontoo.68
8.70%

Clam AntiVirus
Win.Adware.Outbrowse-1197, Win.Adware.Agent-60025
8.70%

Bkav FE
W32.HfsAdware
8.70%

Malwarebytes
PUP.Optional.TVTime
8.70%

K7 AntiVirus
Adware
8.70%

F-Prot
W32/PullUpdate.B.gen
8.70%

ESET NOD32
MSIL/Adware.PullUpdate
8.70%

Agnitum Outpost
PUA.PullUpdate
8.70%

Rising Antivirus
PE:Adware.PullUpdate!6.258A[F1], PE:Adware.PullUpdate!6.258A [F]
8.70%

Sophos
Pull Update (PUA)
8.70%

Avira AntiVirus
ADWARE/Adware.Gen7
8.70%

AVG
Generic_r
8.70%

McAfee
Artemis!B2B87E43A315
4.35%

The domain spursx5.tinyboxarcade.com has been seen to resolve to the following 83 IP addresses.

server-52-84-125-95.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-80.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-76.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-54.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-42.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-222.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-190.iad16.r.cloudfront.net
June 7, 2016

server-52-84-125-158.iad16.r.cloudfront.net
June 7, 2016

server-52-85-131-21.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-13.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-165.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-148.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-129.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-127.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-70.iad53.r.cloudfront.net
May 16, 2016

server-52-85-131-24.iad53.r.cloudfront.net
May 16, 2016

server-54-230-102-186.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-159.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-150.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-110.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-99.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-58.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-249.iad2.r.cloudfront.net
April 14, 2016

server-54-230-102-200.iad2.r.cloudfront.net
April 14, 2016

server-52-85-142-38.iad12.r.cloudfront.net
April 13, 2016

server-52-85-142-16.iad12.r.cloudfront.net
April 13, 2016

server-52-85-142-253.iad12.r.cloudfront.net
April 13, 2016

server-52-85-142-236.iad12.r.cloudfront.net
April 13, 2016

server-52-85-142-220.iad12.r.cloudfront.net
April 13, 2016

server-52-85-142-207.iad12.r.cloudfront.net
April 13, 2016

 
Showing 30 of 83 IP Addresses

File downloads found at URLs served by spursx5.tinyboxarcade.com.

1 / 68      (Adware)

1 / 68      (Adware)

13 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

13 / 68    (Adware)

1 / 68      (Adware)

4 / 68      (PUP)
http://spursx5.tinyboxarcade.com/tt/.../Setup.exe  (c0af636a3c1da8b0010055700a69e53f)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

9 / 68      (PUP)
http://spursx5.tinyboxarcade.com/tt/.../Setup.exe  (b2b87e43a315ea1eb91ce837b1f01546)

1 / 68      (Adware)

The following 34 files have been seen to comunicate with spursx5.tinyboxarcade.com in live environments.

 
Latest 20 of 79 files

URL:
http://spursx5.tinyboxarcade.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3