www.auto-sleepy-files-hurricane9.biz

Reactivation Period

Domain Information

The domain www.auto-sleepy-files-hurricane9.biz registered by Reactivation Period was initially registered in March of 2015 through ENOM, INC.. Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ENOM, INC.

Server location:
Oregon, United States (US)

Create date:
Thursday, March 26, 2015

Expires date:
Friday, March 25, 2016

Updated date:
Saturday, April 9, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, Adware.Amonetize.ET (M)
90.00%

Bkav FE
HW32.Packed
40.00%

avast!
Win32:Adware-gen [Adw], Win32:Amonetize-JK [PUP], Win32:Evo-gen [Susp]
40.00%

AhnLab V3 Security
PUP/Win32.Amonetiz
40.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, not-a-virus:HEUR:AdWare.Win32.Generic
30.00%

Baidu Antivirus
PUA.Win32.Amonetize
30.00%

AVG
BundleApp, Adware BundleApp.HCR, Generic6
30.00%

Panda Antivirus
Generic Suspicious, Trj/Genetic.gen
30.00%

VIPRE Antivirus
Amonetize, Trojan.Win32.Generic
30.00%

ESET NOD32
Win32/Amonetize.FC potentially unwanted application, Win32/Amonetize.FF potentially unwanted application
20.00%

Dr.Web
Trojan.Amonetize.3647, Trojan.Amonetize.2350
20.00%

Malwarebytes
PUP.Optional.Amonetize
20.00%

ESET NOD32
Win32/Amonetize.FG potentially unwanted (variant), Win32/Amonetize.FF potentially unwanted (variant)
20.00%

MicroWorld eScan
Gen:Application.Imonetize.2, Gen:Variant.Adware.Kazy.452726
20.00%

Bitdefender
Gen:Application.Imonetize.2, Gen:Variant.Adware.Kazy.452726
20.00%

The domain www.auto-sleepy-files-hurricane9.biz has been seen to resolve to the following 5 IP addresses.

April 17, 2016

ec2-54-244-233-188.us-west-2.compute.amazonaws.com
November 18, 2015

ec2-54-245-91-20.us-west-2.compute.amazonaws.com
November 18, 2015

ec2-54-244-90-176.us-west-2.compute.amazonaws.com
June 19, 2015

ec2-54-245-242-253.us-west-2.compute.amazonaws.com
June 19, 2015

File downloads found at URLs served by www.auto-sleepy-files-hurricane9.biz.

1 / 68      (Malware)

1 / 68      (Malware)

1 / 68      (Malware)

1 / 68      (Malware)
http://www.auto-sleepy-files-hurricane9.biz/.../Setup__2919_il133.exe  (divx.web.player.installer__8420_il17957.exe)

22 / 68    (PUP)

8 / 68      (PUP)

1 / 68      (Malware)

11 / 68    (PUP)

URL:
http://www.auto-sleepy-files-hurricane9.biz/

Google Analytics:
UA-2249740

Title:
“Auto-Sleepy-Files-Hurricane9.biz”

Description:
“Find Cash Advance, Debt Consolidation and more at Auto-Sleepy-Files-Hurricane9.biz. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Auto-Sleepy-Files-Hurricane9.biz is the site for...”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

30 of 685 related domains