This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GoDaddy.com, LLC (R171-LRMS)
Server location:
Virginia, United States (US)
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (89% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.StartNow.M, PUP.SalyutemPlyus.M, PUP.Bundler.Outbrowse, PUP.Outbrowse.Bundler, PUP.Outbrowse.safeInSt.Bundler (M)
88.89%
Dr.Web
Trojan.OutBrowse.6, Detection.Undefined
44.44%
Malwarebytes
PUP.Optional.OutBrowse, PUP.Optional.BundleInstaller.A
44.44%
ESET NOD32
Win32/OutBrowse.BK potentially unwanted application, Win32/OutBrowse.BO potentially unwanted application
33.33%
VIPRE Antivirus
Threat.4823950, Threat.4150696
33.33%
McAfee
Adware-OutBrowse.c, Program.Adware-OutBrowse.c
33.33%
K7 AntiVirus
Unwanted-Program
33.33%
Sophos
OutBrowse, PUA 'OutBrowse' (of type Adware)
33.33%
AVG
Downloader, Potentially harmful program Downloader.CLV
33.33%
Trend Micro House Call
Suspici.D7386B62, Suspici.28F3E04A
22.22%
Avira AntiVirus
APPL/Outbrowse.Gen, PUA/Outbrowse.Gen
22.22%
Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.Outbrowse, Application.Bundler.Outbrowse.BA
22.22%
avast!
OutBrowse-AX [PUP], OutBrowse-IN [PUP]
22.22%
Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Outbrowse.1
22.22%
MicroWorld eScan
Gen:Variant.Application.Bundler.Outbrowse.1, Application.Bundler.Outbrowse.BA
22.22%
The domain get.blue9876.info has been seen to resolve to the following 2 IP addresses.
ec2-54-243-47-220.compute-1.amazonaws.com
May 21, 2015
ec2-54-243-102-220.compute-1.amazonaws.com
December 30, 2014
File downloads found at URLs served by get.blue9876.info.
URL:
http://get.blue9876.info/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Microsoft-IIS/8.0 (ASP.NET)