The domain cp.mplayertotal.com is registered by proxy through NAME.COM, INC. and was originally registered in April of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Kirkland, Washington within the United States which resides on the eNom, Incorporated network.
Registrant:
Whois Privacy Protection Service, Inc.
Server location:
Washington, United States (US)
Create date:
Friday, April 19, 2013
Expires date:
Tuesday, April 19, 2016
Updated date:
Monday, March 23, 2015
ASN:
AS21740 ENOMAS1 - eNom, Incorporated,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.TUGUUSL.X, Adware.Tuguu, PUP.Installer.TuguuSL.R, PUP.Awimba.W, PUP.Tuguu.Bundler (M)
100.00%
Sophos
Generic PUA CF, DomainIQ pay-per install
71.43%
Dr.Web
Adware.W3i.29, Adware.W3i.28
71.43%
VIPRE Antivirus
DomaIQ
71.43%
ESET NOD32
Win32/DomaIQ
71.43%
Malwarebytes
PUP.FakeFlash.Domaiq, Adware.DomaIQ
57.14%
Norman
Suspicious_Gen4.ERZRG, Obfuscated.gen!r, Suspicious_Gen4.EFXQK
57.14%
avast!
NSIS:DomaIQ-C [PUP], Win32:DomaIQ-M [PUP]
57.14%
Avira AntiVirus
APPL/DomaIQ.Gen, APPL/DomaIQ.Gen7
57.14%
McAfee
Artemis!718246AA73CC, Artemis!814760386151, Artemis!DBE9549F63CE
42.86%
K7 AntiVirus
Trojan
42.86%
Comodo Security
ApplicUnwnt, UnclassifiedMalware
42.86%
Panda Antivirus
PUP/MultiToolbar.A, Adware/MultiToolbar, Suspicious file
42.86%
IKARUS anti.virus
AdWare.DomaIQ, Trojan-Ransom.Win32.Blocker, AdWare.SuspectCRC
42.86%
Trend Micro House Call
TROJ_GEN.F47V1205, TROJ_GEN.F47V0607, TROJ_GEN.F47V0601
42.86%
The domain cp.mplayertotal.com has been seen to resolve to the following 3 IP addresses.
rc2.sjl01.dmtracker.com
May 3, 2015
ec2-54-218-87-136.us-west-2.compute.amazonaws.com
September 4, 2014
ec2-54-187-111-79.us-west-2.compute.amazonaws.com
September 4, 2014
File downloads found at URLs served by cp.mplayertotal.com.
The following 35 files have been seen to comunicate with cp.mplayertotal.com in live environments.
URL:
http://cp.mplayertotal.com/
Google Analytics:
UA-2249740
Description:
“Find Cash Advance, Debt Consolidation and more at Mplayertotal.com. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Mplayertotal.com is the site for Cash Advance.”
Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)
Related Domains
30 of 685 related domains