The domain www.javfiler.net is registered by proxy through GO FRANCE DOMAINS, LLC and was originally registered in May of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrant:
Domains By Proxy, LLC
Registrar:
GO FRANCE DOMAINS, LLC
Server location:
Oregon, United States (US)
Create date:
Friday, May 15, 2015
Expires date:
Sunday, May 15, 2016
Updated date:
Tuesday, May 19, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (95% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.TuguuSL.K, PUP.Binaritpersonalcomputerperipheralequipment.K, PUP.Tuguu.TuguuSL.Bundler (M), PUP.Binaritp (M), PUP.Tuguu (M)
94.74%
McAfee
PUP-FJP!1F2E3FF39A4F, PUP-FAO!AD78B07EC1C0, CryptDomaIQ
31.58%
Malwarebytes
PUP.Optional.Domalq
31.58%
K7 AntiVirus
Unwanted-Program
31.58%
avast!
Win32:DomaIQ-CJ [PUP], DomaIQ-CO [PUP], Win32:DomaIQ-CK [PUP]
31.58%
Kaspersky
not-a-virus:AdWare.Win32.Lollipop
31.58%
Agnitum Outpost
PUA.Lollipop
31.58%
Sophos
Generic PUA FJ, DomainIQ pay-per install, PUA.DomainIQ pay-per install, PUA 'DomainIQ pay-per install'
31.58%
VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, Threat.4783235
31.58%
Avira AntiVirus
APPL/DomaIQ.Gen
31.58%
IKARUS anti.virus
PUA.Tugus, AdWare.DomaIQ
31.58%
AVG
DomaIQ, Adware DomaIQ.DO
31.58%
MicroWorld eScan
Adware.Navipromo.CIP, Application.Bundler.Agent.A, Application.Bundler.DomaIQ.Q
31.58%
Bitdefender
Adware.Navipromo.CIP, Application.Bundler.Agent.A, Application.Bundler.DomaIQ.Q
31.58%
G Data
Adware.Navipromo.CIP, Application.Bundler.Agent, Application.Bundler.DomaIQ
31.58%
The domain www.javfiler.net has been seen to resolve to the following 11 IP addresses.
ec2-54-186-187-58.us-west-2.compute.amazonaws.com
November 2, 2014
ec2-54-213-71-128.us-west-2.compute.amazonaws.com
November 2, 2014
ec2-54-244-30-115.us-west-2.compute.amazonaws.com
July 10, 2014
ec2-54-186-83-158.us-west-2.compute.amazonaws.com
July 10, 2014
ec2-54-218-30-251.us-west-2.compute.amazonaws.com
May 14, 2014
ec2-54-201-9-67.us-west-2.compute.amazonaws.com
May 14, 2014
ec2-54-201-153-98.us-west-2.compute.amazonaws.com
May 14, 2014
ec2-54-201-189-9.us-west-2.compute.amazonaws.com
May 14, 2014
ec2-54-200-4-93.us-west-2.compute.amazonaws.com
May 14, 2014
File downloads found at URLs served by www.javfiler.net.
The following 9 files have been seen to comunicate with www.javfiler.net in live environments.
URL:
http://www.javfiler.net/
Network:
Amazon Web Services (AWS), running an EC2 instance
Statistics are for the previous month.