download.refog.com

REFOG INC

Domain Information

The domain download.refog.com registered by REFOG INC was initially registered in August of 2002 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Remove Malware from download.refog.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Saturday, August 10, 2002

Expires date:
Thursday, August 05, 2021

Updated date:
Thursday, October 17, 2013

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.Clodccc.Trojan
100.00%

MicroWorld eScan
Trojan.Generic.10357808
100.00%

McAfee
Keylog-Refog
100.00%

K7 Gateway Antivirus
Unwanted-Program
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Trend Micro House Call
TROJ_GEN.F47V1208
100.00%

avast!
Win32:Refog-A [PUP]
100.00%

Kaspersky
not-a-virus:Monitor.Win32.KeyLogger
100.00%

Lavasoft Ad-Aware
Trojan.Generic.10357808
100.00%

Sophos
Generic PUA NM
100.00%

Comodo Security
UnclassifiedMalware
100.00%

F-Secure
Trojan.Generic.10357808
100.00%

VIPRE Antivirus
Refog Inc.
100.00%

McAfee Web Gateway
Keylog-Refog
100.00%

ESET NOD32
Win32/KeyLogger.Refog (variant)
100.00%

The domain download.refog.com has been seen to resolve to the following 8 IP addresses.

server-54-230-54-103.jfk6.r.cloudfront.net
January 25, 2014

server-54-240-190-138.jfk6.r.cloudfront.net
January 25, 2014

server-54-230-52-198.jfk6.r.cloudfront.net
January 25, 2014

server-54-240-190-148.jfk6.r.cloudfront.net
January 25, 2014

server-54-230-52-164.jfk6.r.cloudfront.net
January 25, 2014

server-54-230-52-246.jfk6.r.cloudfront.net
January 25, 2014

server-54-240-190-105.jfk6.r.cloudfront.net
January 25, 2014

server-54-230-53-212.jfk6.r.cloudfront.net
January 25, 2014

File downloads found at URLs served by download.refog.com.

22 / 68    (PUP)
http://download.refog.com/refog_setup_pm_7xx.exe  (117eac4cd6c9ecd64a1e7fe0c2e37263)

The following 6 files have been seen to comunicate with download.refog.com in live environments.

URL:
http://download.refog.com/

Google Analytics:
UA-888581

Title:
“Refog - Downloading Refog - Keylogger Software”

Description:
“Keylogger Software”

Network:
Amazon Cloudfront

Web server:
AmazonS3

Alexa:
US rank:  151,323
Global rank:  171,777
Backlinks:  906

Statistics are for the previous month (Alexa statistics are for entire refog.com).

Remove Malware from download.refog.com - Powered by Reason Core Security