coolining.net

Canadian Insurance Brands Inc.

Domain Information

The domain coolining.net registered by Canadian Insurance Brands Inc. was initially registered in November of 2015 through EVOPLUS LTD. Currently this domain has been known to host various forms of malware. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
DEEP DIVE DOMAINS, LLC

Server location:
Dublin City, Ireland (IE)

Create date:
Friday, November 27, 2015

Expires date:
Sunday, November 27, 2016

Updated date:
Sunday, November 29, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Scanner detections:
Malware distribution  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.WebPick.AndreyHm (M), Adware.Generic.AT (M), PUP.WebPick (M)
100.00%

AVG
Adware Generic6.LCS
2.04%

avast!
Win32:FakeDownload-E [PUP]
2.04%

The domain coolining.net has been seen to resolve to the following 10 IP addresses.

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 27, 2016

April 15, 2016

December 15, 2015

ec2-54-72-9-115.eu-west-1.compute.amazonaws.com
September 12, 2015

ec2-52-27-128-62.us-west-2.compute.amazonaws.com
July 16, 2015

ec2-52-27-128-59.us-west-2.compute.amazonaws.com
July 16, 2015

ec2-52-27-128-56.us-west-2.compute.amazonaws.com
July 16, 2015

ec2-54-200-195-191.us-west-2.compute.amazonaws.com
May 4, 2015

ec2-54-213-72-9.us-west-2.compute.amazonaws.com
May 4, 2015

ec2-54-68-13-248.us-west-2.compute.amazonaws.com
May 4, 2015

File downloads found at URLs served by coolining.net.

 
Latest 30 of 270 download URLs

The following 448 files have been seen to comunicate with coolining.net in live environments.

 
Latest 20 of 494 files

URL:
http://coolining.net/

Title:
“coolining.net”

Description:
“website”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.14)