d74.newplaynow.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain d74.newplaynow.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Remove Malware from d74.newplaynow.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Monday, July 30, 2012

Expires date:
Thursday, July 30, 2015

Updated date:
Thursday, July 31, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.BundleInstaller.VG
100.00%

VIPRE Antivirus
Bundlore
100.00%

ESET NOD32
Win32/Adware.Bundlore
100.00%

Reason Heuristics
PUP.Installer.Bundlore.F
100.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
50.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%

Panda Antivirus
Adware/Conduit
50.00%

MicroWorld eScan
Adware/InstallCor.A
50.00%

Dr.Web
Adware.Downware.407
50.00%

Avira AntiVirus
Adware/InstallCor.A
50.00%

AhnLab V3 Security
PUP/Win32.BundleInstaller
50.00%

Fortinet FortiGate
Riskware/Bundlore
50.00%

The domain d74.newplaynow.com has been seen to resolve to the following 4 IP addresses.

a23-0-160-8.deploy.static.akamaitechnologies.com
September 5, 2014

a23-0-160-32.deploy.static.akamaitechnologies.com
September 5, 2014

a23-67-242-40.deploy.static.akamaitechnologies.com
April 11, 2014

a23-67-242-34.deploy.static.akamaitechnologies.com
April 11, 2014

File downloads found at URLs served by d74.newplaynow.com.

9 / 68      (Adware)
http://d74.newplaynow.com/download/bin/.../setup.exe  (88a938d7e4a3fb50e5b12bc9f784d950)

7 / 68      (Adware)
http://d74.newplaynow.com/download/bin/.../setup.exe  (468660005b634c5783d920582af3d32b)

The following 32 files have been seen to comunicate with d74.newplaynow.com in live environments.

 
Latest 20 of 32 files

URL:
http://d74.newplaynow.com/

Web server:
Apache/2.2.3 (CentOS) (PHP/5.3.26)

Remove Malware from d74.newplaynow.com - Powered by Reason Core Security