home

www.have9to.info

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain www.have9to.info is registered by proxy through NameCheap, Inc. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
NameCheap, Inc

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
have9to.info

Whois:
2 have9to.info records

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize (M), Threat.Win.Reputation.IMP, PUP.Amonitize.Installer (M), PUP.Amonetize.NEWSOFTInkorporeishnTOV.Installer (M), PUP.Amonetize.Meta (M), Win64.Generic, PUP.Amonetize (M)
100.00%

Malwarebytes
PUP.Optional.Amonetize
8.16%

Avira AntiVirus
ADWARE/Amonetize.Gen, ADWARE/Adware.Gen4
8.16%

AVG
Generic
8.16%

AhnLab V3 Security
PUP/Win32.Amonetize
6.12%

ESET NOD32
Win32/Amonetize.LS potentially unwanted (variant), Win32/Amonetize.LP potentially unwanted (variant), Win32/Amonetize.LY potentially unwanted (variant)
6.12%

Dr.Web
Trojan.Amonetize.11110, Trojan.Amonetize.11105
6.12%

Qihoo 360 Security
Win32/Virus.Adware.8ff
4.08%

avast!
Win32:Dropper-gen [Drp]
2.04%

Panda Antivirus
Trj/Genetic.gen
2.04%

MicroWorld eScan
Gen:Variant.Adware.Jaiko.1111
2.04%

NANO AntiVirus
Trojan.Win32.Amonetize.dytukt
2.04%

G Data
Gen:Variant.Adware.Jaiko.1111
2.04%

Bitdefender
Gen:Variant.Adware.Jaiko.1111
2.04%

Lavasoft Ad-Aware
Gen:Variant.Adware.Jaiko.1111
2.04%

The domain www.have9to.info has been seen to resolve to the following 3 IP addresses.

198.54.117.86
February 26, 2016

199.59.166.109
December 23, 2015

54.235.134.166
ec2-54-235-134-166.compute-1.amazonaws.com
November 18, 2015

File downloads found at URLs served by www.have9to.info.

1 / 68      (PUP)
http://www.have9to.info/.../LjFFdQFfYgdwPzUwHi1MUhBQOCo1NAwrRkQhG2dhdXMfIUAGM243Pzc7GSlRMmpyMyEiJxkwWx18Q3h aWdeNwVSMwNmLH5jSHABXzEMYyxzZU92V1thDWZ cGQcdVVdbwAyfSRgSyVWX3FBZ3J2YUxzAlZlDG5   (generator v.1.2__15052_il474.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?C9b84jniSDNVwQS10FAFRianIXVxYBX0gKMikzUAYFB1tbX3U0MVwEUUxXJy4ab3cSNlBRQSMIIS9lXgdMXQ41CCM0LVgPXWlXJy4ab3cSNlBRQSMIIS9lSlMFUltfDTcidgtTXlcIXFhrJ3AIBAEMU11aNyZxDlJdVwtcUDUicg9VARIeX1RicHcOVwEDX1lc  (igi 4 the mark__3156_il20393.ace)

1 / 68      (PUP)
http://www.have9to.info/.../GGJpNThkBkFwal8aXDU Ll5ELT8NYnIiLihXAW0eGz5XKzguVkkyM0V0WjU2LFkcKD8DJ1wzcShXGy8 LyhJNzkuXwobZzwoSyN8C1scLXEnLFczPiFXA20KBiYSc3l5AkQVPwYgWCt8JFcWbRERMF4iOWR2ADE0GCZYI3E8A1IgOBJ9WHJiegcJcz4SfQshNHZTC3VtF3oNdmN6BF11akZ6CX4xKwBdYC5FdAhzY3cKV3VqRnE=  ({blocked}.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?ymOUnsEzf8Dwg9JgccK0dXFkhDentbRmMZB1UJBCtoX0B0T1YeCR8qMwcLeDsCVxsIZAUGHDEVFVAWHWQWPUVuKQNKEAwjfiAGKBgDSlIrPTALWAEVEVYVAi4xSAcsS1teDAEjJgEVMU4THh4IOzwKKCQKFlYYACoIUzIhFQRdUj0nOhocNhIJSFIuHGNFICAID1kVRgEgAxEgCE1 CwgqfiocMhQKVxgJaSZfTiROVg9AXnowVkcgT1FZGAx NF5GcxlRWU8Ie2IMRCZPAw0fCy0xXBdjDlcFSFl7bVhAcElQCA==  (adobe photoshop cs6 serial number free download__13150_i1759804723_il151.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?iwdIM1NUtfHxIWOiReIGhFSFhZUWd4BGg2FQsZHgB0fwh4ZlIWGxICIDUMHTYGDwsVCCwjUDshB008GQkoPlorMV8nQjMnYg5eIzwXFUI2AD8oXzogBgNPEAE9JFUVNAQWBxYJLBAMHTYGDwsVCCwjUDshB008GQkoPlorMV8nQjMnYg5eIzwXFUI2AD8oXzogBgNPBFV0K1N5NkBXXkIGfysEd2QSAFxAVi0vA3s3EVReQlx f1d5M0BUDEVUfmtFf2hFUl1AUXF AXti  (scribblenauts unmasked a dc comics adventure__2963_il11596.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?PQDuYkozJiJjQ2BjAEAUd7R2F/cVtsXkkZKwQgOCBIaF1eTX1PICMhEzATUlEEDCI byYtCh0OGQQxIzBebkApCC8MexUrAjcHABsuQhYkKBlyPQoIOQA/.../D1ZLewhhM3dNaF1fXD5YbWBwQW5SWUNyX2U=  (nero startsmart 7 free download full version windows 7__16177_il703.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?bOBk3CEi1dFCowGFosK1QASlNhd0UGdmMKUAkSJiZWB3V1URcUECokAkt EwBVAQ1kEgdSOiAbFxALfn8mSQZ0J0sMWgIWOkkMESQDAiYjeiZnBnEkSyVWKQYuAw0BCgIrJixxJmcVfTNbIg4WOA9eDAI4RT0YGSgxYHN1MGUlVwMVJVsMASxFKg8BKTJnDS4mdTYOAXAxXiUBOAMoCCR3J1kOcCVbLRgAChNaGiggAikICSolWQZ3J1spUQE4LksOETwCKyUaciZnAjwnZQNXATgDXxoiVAxCBSo2AlcYJBlBCgMiJzYOFSwNVAtJHy4KSiY3T0JVXyt0CFIncQpTVAZ6dghQdScIBQVVK3BfCiV9UAhRASojWgV2JA8AUFtpNloOcnFdBlNaeHtcAQ==  (video player__4608_i1746633753_il11790.ace)

1 / 68      (PUP)
http://www.have9to.info/.../ID5QGxACRAQnPCgobgkDHQwCLy0ccXQpMkYuDCUnagFUAxYfSVFyeXRncx0fAUk1JzoyJVoGWCkNFCwkLi1RTgBcXwZwe3h0AApKCQcAdHwidQFbQlwBUXsrdSgEXxdaV1t0cSAuBl9GXlVFNnl8fQFcS1lUW3t7cQ==  (aaa logo maker 2015 full version download__13150_i1757321506_il70721.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?YJiKcXev47Ly8bOAo3C0sFGWhkXGVWbUMVVVopIw12UGxXRBJHKy8PIhtlMRNGRTgeDCgLfgITQF49EQg7EzYEG1FqZB4MORE5MRNXX385WHZXagdFUg47KVt8W2xRTwUHO3xZflJhURdQDjwuCilXPVJADFM7Lwh8RSxUSwUDbX1fe1puXEE=  (terratech__3422_il13692.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?S6ipXQTuRaJVMbAzE OkhjT2IYXF5tZHIWMwwjXw1NaWVtQmFHI0QMFjEpaSYmACEdPhEqIn83MxUnWgwWKj46AXlTeHEIHT13MxAmCDdtCAAoPzUYNzxuZR0RKnoDFCASeHQIBCw9MRMgDj1CQkJzFjUYN0cgB1QWYGQ2FGdWYQReRDtmZkcxUjYDXhU9ZDAWZlg1VAoVPjBiTDYHMg8PVixgaURmVWsCXkhpYWw=  (star wars battlefront 2 game__14973_il7077.ace)

7 / 68      (Adware)
http://www.have9to.info/.../U0BlYWhWCyQAOAJTY2V AEw5AjQAByhpGHkpYj00Agcxfx5ZCzAVI00oIjErHi4mBz8KATEwaFIPPRk1PQ8gJCBUBywtbDAiE38DUA4gEXo2AjEtK0dBDwI0A0UUOzlbBiYRNUAdYWktBAksQGFTXWlnKldceEM1BFtjZi8AWnETMlQINWIsVAlxRWhQCzViaEFbdEFlUlloYX4CUnA=  (windows kms activator ultimate 2015 v2.6__6338_il2302.exe)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?AMNrh1z45nNyg8AQFeFAkEQHBje1xdBFxXVAMxJCpPWQRJBwFIMT8rFAFJRwBGBiA/.../KwMkI114AHlNIxUpdj88Wkh5cSNzKwg4OFc eg0jGTV2VA9UDl1RNSA9PhwJXB9pCFoyJS8ADVVcRwRTd3V7Fw5SHw0NVnEudkJRVEkNBgp4fi1AWwgeVQBfd3goRg0FSVEDW2c5f09ZBU4DAltwfXhK  (4shared__15334_i1745920748_il16.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?IHCyfhNzXPPy0xCg8HIEdpfnhmdldTXWgZOT05ISdEV119SWx2OTomHw8Qc04rOCg6Jh1AHCdLZR0jK3MwHD1 NwwBIwYpKFMhNDdpHx0GezQMLTc3MgUxLgUzNg4KNGAdETB7XwENOhM8Cyg4MxcHBSsnZWQ6ICILAwxoCWltenlyHQBdehhsNSsrJxpTUC1CYGVxcSBAVVp2H2xhK396TwNRehhvNm88ckRXXHpNb2V4eHpL  (4shared__15334_i1745921094_il16.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?jieNGrM3sRHAwXPS4dIw5CfFtHUGByR2tQEj8aAAFzdkd AEd0GhsAKC4KcAcAOgsbACphBiQCTh8AClUHPSd9ficDACcPH3I7N35CHAArXQMtNzR GQcdDyAEFBQJfUsfMhFdaCAXOVoXCQsZFSAmHyhuTmYZAQQ8IhZrQEJvXQwAKyNEeAdBYl4NVXh3FnoAFWFYX1V5JER7V0U0WgxdfSUXdQZDa0wdVHN2RnkLR2peWlV4  (4shared__15334_i1757575337_il1876.ace)

1 / 68      (PUP)
http://www.have9to.info/.../ehMaHStCLCc7ODg6AVcgDA4rLRAwJR8fJgQfH3QYPjsWWhEMHSM6YAEnAFp2WlRyYgkkPAMVbF1OdmIzZ2FENzIFFmkfLiMmBh4pTwlzdHlnYVoXI1pDJC8tN2cNFyQISSdwejBhDEAjWxgjeCozYFhBIVlLJn5tJWRSQHNdTXt9e2JjXg==  (sony vegas pro 13.0 build 444 x64 full version__6338_il3820.ace)

1 / 68      (PUP)
http://www.have9to.info/.../JkcVHUA MSIVICQPExVRCmg2OQMdSiYQUXwXDAd7BwgfDVg2IRYGdidQT05RZmIcQGFsBEVKBDJnTEBhYwAUTVA1M05AM2NVEBkMb2cbFWVkWUNeQGZoSEBkbFZETQdgbA==  (omsi the bus simulator__3424_il69696.ace)

0 / 68
http://www.have9to.info/mer2.php?J1nhiepygXPFQcGwAKHkRWdnsfW0ZcUFYaBjU6WApVWFBDSlN OkMLDgAdTU0UMCtDCwxPERlIWhUgUl4hEzBANDMJIH8EOVwsCjRWFiBzViUDIAk0DQ09VysiOgM0N18VEklWTg4ABBADAytBHgYICBUkWmw5WQ8aDAFWClZle1MNX1sGFRoBbC9QDQxfVUIYAWt BFpaWwBDQF5hK1dWXgoDQB1SOWxFX1VYUURBUW95Altb  (4shared__15334_i1760472525_il1876.ace)

1 / 68      (PUP)
http://www.have9to.info/.../ATtFAAJOdFZycAZiW0wEQg==  (age of empires 1__3156_il26835.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?hb12FamEvxHgdDQS8OA3hHVllMBBxzVEsmFxUYC1UPdVVfd1AIGgdXWz5cISAQDENWGnYjAAljER0cC1VpJxEdKxcVDT8MfiMHGW5CUywHUFZgElx4RUlfUwgLdVRVfRQZWVoHAiUDVXNOSl9VVwJ3WQlxEk9cU1IFcllZfFAMWV8ABnJWWHFHT1xR  (left 4 dead__3422_il15833.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?Flr6vSjiPcMAkARR88BFRhTXdCRxhDZkwKMQ42BRYLRWJfX3YTNAkUXw5uOgUxDTIfWUAFfUEzPw4kBRdFUDQPHTkHHQ0CRhgyBwwNXhYAE1gCIEEfI01tNh1bFDoPGnYQd1FKVEI2U1hoUCVUQFRBZ1lbYFMgDRYGQ2VYWWJaJQ1BA083XVFpUn5aVEJHbltdZFR1VEMFQ2E=  (plants vs. zombies__3156_il1863.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?sNZXDrQMuwBSsoKy0dP3BEWUJgb3ZxR3cuFBoDJz5ld0Zjf1MHASs8MTxPASEUGQc9cS43XHoXGhoRJz8rYhU0ORwTKC8qKCoTPCgoSiMiOzYwAXo7BllYFDU1Jhs0PlMEQnM4byJDYnwTE0ErbGt1F2gsQxYQezxqdEFmLEJFRnxiPn0WYStAQEsrfCx1T2B5QUBAdmtsd0A=  (plants vs. zombies__3422_il1863.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?wZb13G5ESDAT8QQlooW3hiakZ0Vx8GchMmMikHMwYMAnMMcmBiBygHV1o/.../BlhRK1BuGzEbMUkAGABUKDZiED8WWFccVDUjKhY3B2wODlsmISETMwBdVmx9MD8vXGtJdlIqUGMgdUo8U1RXdgEgY3dGOwRVCnVWJzZ3RGsAUgMhUyQydBZuBgcDcwcgZXRHfBYADnYBcWR3Q21XAgY=  (incredible hulk 1 game__14973_il18585.ace)

1 / 68      (PUP)
http://www.have9to.info/.../Zn1JQ3RNR08LLyU8DhJnSUZQX31uPBUTPBEKVC8aCWc0FzRTMwcMPC0tFF0dGR8MTiktOA4SARkCGQYvJSk6Sx0sM0I7LyZnJhg ChcIG2UPLQoTfAtDVAt4LnhXT2JKEwwNeX4qVUVoQBMMXCgtdQNDORpCXFsvfClTRGoZSw1OOnlxVkJuQEdfWHZ7fw==  (gta san andreas game__14973_il22.ace)

1 / 68      (Malware)
http://www.have9to.info/mer2.php?VelME78fWnIAAePixYVltmQGdLWWNwAh4FNgMmDAhwcQ8LUXEeJAAKJD0Kfg87C3ARBXx4eXwNZSEeEhQAP1wMKy04bigGAD1RfCMuIwIGFAAdQEAoEz9lKjgMd3lCBWIIESwbAgF6Czw6O2cpOBcubXwNIyASCQEDBgZSKQAjLyk4CyxubCg/IDwzBwACZVMoZBkvKxV5dnlrUi8gPDQZAxFlACtlJ2M8AQR0eHw/ZCAsMBYDd3FSPDo/.../cRFMV2pfYlFbdHUACFZk  (file__4837_i1748388629_il85.ace)

1 / 68      (PUP)
http://www.have9to.info/.../cE1SVFdQB2VeLnZBW1JSWFZvXn0gRVZVVwUEZl8uc0ACVAhXBTELfyAWRRIAXANjWXR2Q1RTBlk=  (nero startsmart 7 free download full version windows 7__16177_il7448.ace)

1 / 68      (Malware)
http://www.have9to.info/mer2.php?oXY0EV5lNGGT0rQyw5W1F/aV52bB5wYxMPLyofMT0NdGMGX3phHyo8ViwuCFg9Lw4qPFRjIlxdcwoFO2l5PwMFIRoWBRYzYXAfTyF/.../BHNhA1t dkksaA10YgFUeHVXamED  (4shared__15334_i1759650248_il1876.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?7tHJ4cy8TnQRE6OV0MFwVlQAZafWQBVl9bNQNHHSx3BVVNDWRIRwYtLF0bRH49AlJSPCMFXjdCHRd6Gj8yeic0DRkEbUwFHlMZH3wRFnkeAXt6DQ5AGipmQAYgfRo3bDNeUTABM3kJK1MOA20ZBB1xUzRsMxp5MBoibjBIUhopYgwEHXFTNnwFFHogJCB6DigNGV1ADAcOUxY0UgUWex4NMHkaTUAZOn1MESd CjdCHRZuIBEyegkgQhoUVAwFHnFSN0I8AnkwDT15CSwMGzpUQBIdfV5fXzEaXhATK0QTF1k5C2pJDiNYBl9LZVMFRip5B1RJXTYMBBBwfQNRTVxkXwVDcX0HUh0IMAtTQiwpVVtKCTIPEQB5dwVXTQBiXAVDcHw=  (file__16450_i1759545500_il3107.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?u7ngj4Mq8oA1IcFANbI0wJQUQZW0lfAWsSWQIFXgpaXgx Rh4fB1IIDhIJCxhUClNDB1ZXeTcgDSIhdVYqPnl4P0I2D1EqIl55fgZAIiFuFyk ZnU8bD5FeCoqEnknEgohPU8GKT55eChSOR16F1debTc0CiMhZQYqLWU5KAoqQXotVxBtfyANIQ9bBSoHYXg/.../CjYPeSoqVxIqFEwGEWwPFxpaLBxdMkhxBwsPEj5ABVlHVFkCUgR1QA0KQFYIVAhQe0cODRZTDF8OUn1EXF8TUltUX1F R1xJAQZTVl4AdUIJXUwPWg==  (file__4837_i1755092399_il3107.ace)

1 / 68      (PUP)
http://www.have9to.info/mer2.php?9CyHWjpqIPTyYLOz4FHkx4fghtTGZiX1YSKD1JKh11Zl5JRnp2STEcLj4STTU7OU8mC2MECx5aDyJYLRohJAkfWg4xVCZfLzIeGRUSMUkzFyk6Dy1MDSJQNRw6fDkRH2IWSyIXKz4ZEx5iF1guHG4kW00Qe2YOJkstZwxESHphDHAYfGUIREBwaAgiSnhnXkkQejNfIh96ZAxIVz1hBHJNfGBcQER6YwE=  (driver san francisco game__14973_il17889.ace)

1 / 68      (PUP)
http://www.have9to.info/.../Iw4iOBxvFQEvBgAzIWoAAgt8QzIDAwY2FjsDNAs0CxIyb3kpGyUXMAJRHGNwYxAlU2BTQ1c2K2xKc1Y2XxULMS9iFyVcZAQWWTAsPBUnUGJXRgtjLnwHdVhkUkNXZXViRXNT  (4shared__15334_i1762413371_il1876.ace)

 
Latest 30 of 85 download URLs

URL:
http://www.have9to.info/

Title:
“have9to.info - Registered at Namecheap.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.0.15 (ASP.NET,ARR/2.5,ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.