www.plateau-technologies.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain www.plateau-technologies.com is registered by proxy through Moniker Online Services and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
Moniker Online Services

Server location:
Virginia, United States (US)

Create date:
Wednesday, May 21, 2014

Expires date:
Saturday, May 21, 2016

Updated date:
Friday, December 18, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Wajam.preverttechnology.Installer (M), PUP.Wajam.preverttechnology (M), PUP.Wajam.yvonlheureuxtechnology.Meta (M), Threat.Win.Reputation.IMP
96.97%

NANO AntiVirus
Trojan.Nsis.Wajam.dqgtqq
33.33%

F-Prot
W32/MSIL_Injector.AE.gen
33.33%

G Data
NSIS.Application.Wajam
33.33%

Vba32 AntiVirus
TrojanSpy.Agent, suspected of Trojan.Downloader.gen.h
33.33%

Rising Antivirus
NS:Adware.BrAppWare NS!1.A17E [F]
33.33%

Malwarebytes
PUP.Optional.Wajam
30.30%

Zillya! Antivirus
Trojan.Agent.Win32.573411, Adware.BrowseFox.Win32.184656
30.30%

VIPRE Antivirus
Wajamu, Threat.4895337
30.30%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen, Win32/Virus.Adware.fb4
30.30%

Dr.Web
Adware.Wajam.64
24.24%

Bkav FE
W32.HfsAdware
21.21%

Avira AntiVirus
TR/Dropper.Gen, ADWARE/Wajam.A.18772, ADWARE/Wajam.A.18704, ADWARE/Wajam.A.19290, ADWARE/Wajam.4054408
15.15%

IKARUS anti.virus
PUA.Wajam, Trojan-Spy.Win32.Agent, not-a-virus:Downloader.Wajam
9.09%

K7 AntiVirus
Riskware
6.06%

The domain www.plateau-technologies.com has been seen to resolve to the following IP address.

ec2-54-208-23-129.compute-1.amazonaws.com
January 4, 2016

File downloads found at URLs served by www.plateau-technologies.com.

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

11 / 68    (PUP)

12 / 68    (PUP)

13 / 68    (PUP)

1 / 68      (PUP)

10 / 68    (PUP)

13 / 68    (PUP)
http://www.plateau-technologies.com/.../WWE_1.57.1.15.exe  (acb4ee90b9c343e2affa04bf623edfc7)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (PUP)

15 / 68    (PUP)

1 / 68      (PUP)

1 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (PUP)

10 / 68    (PUP)
http://www.plateau-technologies.com/.../WWE_1.56.1.7.exe  (165c4fa595c1c933a58fbd9b4efb2ba0)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

13 / 68    (PUP)
http://www.plateau-technologies.com/.../WWE_1.57.1.22.exe  (c85f328e77fb34ab0678c5e3479b64fd)

14 / 68    (PUP)

 
Latest 30 of 33 download URLs

The following 38 files have been seen to comunicate with www.plateau-technologies.com in live environments.

 
Latest 20 of 38 files

URL:
http://www.plateau-technologies.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.14 (Ubuntu) (PHP/5.3.2-1ubuntu4.19)