updates.desktoptemperaturemonitor.com
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain updates.desktoptemperaturemonitor.com is registered by proxy through ENOM, INC. and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
WHOISGUARD, INC.
Server location:
Virginia, United States (US)
Create date:
Monday, October 28, 2013
Expires date:
Wednesday, October 28, 2015
Updated date:
Thursday, November 20, 2014
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.SystemAlerts.G, PUP.SystemAlerts.T, Win32.Generic.SystemAlerts.Installer.Meta
100.00%
Malwarebytes
PUP.Optional.DesktopTemperature.A
33.33%
VIPRE Antivirus
Blinkx/SevereWeatherAlerts
33.33%
The domain updates.desktoptemperaturemonitor.com has been seen to resolve to the following IP address.
ec2-54-225-244-87.compute-1.amazonaws.com
August 10, 2014
File downloads found at URLs served by updates.desktoptemperaturemonitor.com.
The following 2 files have been seen to comunicate with updates.desktoptemperaturemonitor.com in live environments.
URL:
http://updates.desktoptemperaturemonitor.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
SSL certificate subject:
CN=updates.desktoptemperaturemonitor.com, OU=PositiveSSL, OU=Domain Control Validated
SSL certificate issuer:
CN=PositiveSSL CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
Apache (PHP/5.4.20)
