d74.newplaynow.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain d74.newplaynow.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Monday, July 30, 2012

Expires date:
Thursday, July 30, 2015

Updated date:
Thursday, July 31, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Bundlore.F, PUP.Outbrowse.Bundler (M), PUP.Tuguu.Awimba.Bundler (M)
100.00%

Malwarebytes
PUP.BundleInstaller.VG
50.00%

VIPRE Antivirus
Bundlore
50.00%

ESET NOD32
Win32/Adware.Bundlore
50.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
25.00%

Panda Antivirus
Adware/Conduit
25.00%

MicroWorld eScan
Adware/InstallCor.A
25.00%

Dr.Web
Adware.Downware.407
25.00%

Avira AntiVirus
Adware/InstallCor.A
25.00%

AhnLab V3 Security
PUP/Win32.BundleInstaller
25.00%

Fortinet FortiGate
Riskware/Bundlore
25.00%

The domain d74.newplaynow.com has been seen to resolve to the following 4 IP addresses.

a23-0-160-8.deploy.static.akamaitechnologies.com
September 5, 2014

a23-0-160-32.deploy.static.akamaitechnologies.com
September 5, 2014

a23-67-242-40.deploy.static.akamaitechnologies.com
April 11, 2014

a23-67-242-34.deploy.static.akamaitechnologies.com
April 11, 2014

File downloads found at URLs served by d74.newplaynow.com.

1 / 68      (Adware)
http://d74.newplaynow.com/download/bin/.../setup.exe  (5f551de2551ed82047aec52d61508cb0)

1 / 68      (Adware)
http://d74.newplaynow.com/download/bin/.../setup.exe  (e3a4df6e847bd16d0c322f50d30015cd)

9 / 68      (Adware)
http://d74.newplaynow.com/download/bin/.../setup.exe  (88a938d7e4a3fb50e5b12bc9f784d950)

6 / 68      (Adware)
http://d74.newplaynow.com/download/bin/.../setup.exe  (468660005b634c5783d920582af3d32b)

The following 45 files have been seen to comunicate with d74.newplaynow.com in live environments.

 
Latest 20 of 45 files

URL:
http://d74.newplaynow.com/

Web server:
Apache/2.2.3 (CentOS) (PHP/5.3.26)