wfs.ezdownloadpro.info

Rafael Leviev

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter. The domain is associated with the publisher Rafael Leviev who is located in Shfela, Israel.
Registrar:
1API GmbH

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

Dr.Web
Trojan.DownLoader12.35418
50.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Mikey.8516
50.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.Mikey.8516
50.00%

ESET NOD32
Win32/Adware.MultiPlug.FK application
50.00%

F-Secure
Gen:Variant.Adware.Mikey
50.00%

McAfee
Trojan.PWS-Zbot.gen.ep
50.00%

Sophos
PUA 'MultiPlug' (of type Adware)
50.00%

MicroWorld eScan
Gen:Variant.Adware.Mikey.8516
50.00%

Malwarebytes
PUP.Optional.Unizeto
50.00%

Zillya! Antivirus
Adware.MultiPlug.Win32.225864
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

NANO AntiVirus
Riskware.Win32.MultiPlug.dorspi
50.00%

F-Prot
W32/MultiPlug.H.gen
50.00%

Bitdefender
Gen:Variant.Adware.Mikey.8516
50.00%

The domain wfs.ezdownloadpro.info has been seen to resolve to the following 3 IP addresses.

April 21, 2016

ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 5, 2015

ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 5, 2015

File downloads found at URLs served by wfs.ezdownloadpro.info.

The following 3 files have been seen to comunicate with wfs.ezdownloadpro.info in live environments.

URL:
http://wfs.ezdownloadpro.info/

Title:
“ezdownloadpro.info”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx