www.maastroy.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.maastroy.com is registered by proxy through ENOM, INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
ENOM, INC.

Server location:
Dublin City, Ireland (IE)

Create date:
Tuesday, April 29, 2014

Expires date:
Wednesday, April 29, 2015

Updated date:
Tuesday, April 29, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SOFTWAREAGILITYLIMITED.i, PUP.SOFTWAREAGILITYLIMITED.b, PUP.SOFTWAREAGILITYLIMITED.Y, PUP.SOFTWAREAGILITYLIMITED.FF, PUP.SOFTWAREAGILITY.Bundler.Meta (M), PUP.SOFTWAREAGILITYLIMITED.u, PUP.SOFTWAREAGILITYLIMITED.W, PUP.SOFTWARE (M)
100.00%

Dr.Web
Adware.Downware.3176, Trojan.DownLoader11.11161, Trojan.DownLoader11.9093
70.00%

AVG
MalSign.Bundle, Found Win32/DH{gRKBEyVXToEPAA}
70.00%

Malwarebytes
PUP.Optional.FilePile
60.00%

MicroWorld eScan
Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702
60.00%

avast!
Win32:Rootkit-gen [Rtk], Win32:Malware-gen
60.00%

Bitdefender
Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702
60.00%

Emsisoft Anti-Malware
Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702
60.00%

G Data
Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702
60.00%

Lavasoft Ad-Aware
Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702
50.00%

F-Secure
Gen:Variant.Graftor.141359, Gen:Variant.Adware.Graftor.143702
50.00%

ESET NOD32
Win32/BundleInstaller.F potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4150696
40.00%

Vba32 AntiVirus
AdWare.Amonetize, Downloader.Agent
40.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
40.00%

The domain www.maastroy.com has been seen to resolve to the following 5 IP addresses.

July 30, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
July 15, 2016

August 12, 2014

May 23, 2014

May 10, 2014

File downloads found at URLs served by www.maastroy.com.

1 / 68      (Adware)
http://www.maastroy.com/.../answers_for_ap_biology_chapter_54_guided_reading.zip_Downloader_14000004.exe  (answers_for_ap_biology_chapter_54_guided_reading.zip_downloader.exe)

1 / 68      (Adware)

24 / 68    (Adware)

22 / 68    (Adware)

22 / 68    (Adware)

1 / 68      (PUP)

23 / 68    (Adware)

13 / 68    (Adware)

11 / 68    (Adware)

4 / 68      (Adware)

The following 215 files have been seen to comunicate with www.maastroy.com in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 219 files

URL:
http://www.maastroy.com/

Title:
“Fast File Downloader”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7 (PHP/5.4.28-1~dotdeb.1)