get.default-page.com

OutBrowse

Domain Information

The domain get.default-page.com registered by OutBrowse was initially registered in February of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from get.default-page.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Sunday, February 17, 2013

Expires date:
Wednesday, February 17, 2016

Updated date:
Wednesday, February 18, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Outbrowse.Bundler (M), PUP.Softpulse.DigitalPluginSl.Bundler (M), PUP.Outbrowse.StartNow.Bundler (M), PUP.IMALI.IMALINIMEDIA.Installer (M)
79.17%

ESET NOD32
Win32/OutBrowse.AD potentially unwanted application, Win32/OutBrowse.AH potentially unwanted application, Win32/OutBrowse.M potentially unwanted application
20.83%

avast!
Win32:Adware-gen [Adw], Win32:Evo-gen [Susp]
18.75%

McAfee
Program.Adware-OutBrowse
18.75%

VIPRE Antivirus
Threat.4150696, Threat.4823950
18.75%

Dr.Web
Trojan.Packed.28608, Threat.Undefined, Trojan.Packed.28611, Adware.Downware.6319, infected with Trojan.Packed.28499, Trojan.Packed.29277
14.58%

Kaspersky
not-a-virus:AdWare.Win32.OutBrowse
8.33%

Clam AntiVirus
Win.Adware.Outbrowse-1197
2.08%

AVG
Adware Generic_c.DGQ
2.08%

The domain get.default-page.com has been seen to resolve to the following 54 IP addresses.

ec2-50-17-254-254.compute-1.amazonaws.com
January 27, 2016

ec2-23-21-196-192.compute-1.amazonaws.com
January 27, 2016

ec2-54-235-117-115.compute-1.amazonaws.com
January 3, 2016

ec2-107-20-180-82.compute-1.amazonaws.com
January 3, 2016

ec2-174-129-32-168.compute-1.amazonaws.com
January 3, 2016

ec2-54-221-222-214.compute-1.amazonaws.com
December 4, 2015

ec2-174-129-233-227.compute-1.amazonaws.com
November 18, 2015

ec2-50-17-193-226.compute-1.amazonaws.com
November 18, 2015

ec2-184-73-196-210.compute-1.amazonaws.com
November 18, 2015

ec2-23-23-110-1.compute-1.amazonaws.com
November 12, 2015

ec2-54-235-198-165.compute-1.amazonaws.com
November 12, 2015

ec2-174-129-213-208.compute-1.amazonaws.com
November 10, 2015

ec2-50-19-117-53.compute-1.amazonaws.com
November 10, 2015

ec2-54-225-150-147.compute-1.amazonaws.com
November 7, 2015

ec2-107-21-118-48.compute-1.amazonaws.com
November 7, 2015

ec2-54-243-123-254.compute-1.amazonaws.com
October 29, 2015

ec2-50-16-236-109.compute-1.amazonaws.com
October 20, 2015

ec2-23-23-250-217.compute-1.amazonaws.com
October 20, 2015

ec2-107-22-180-19.compute-1.amazonaws.com
October 15, 2015

ec2-23-23-192-127.compute-1.amazonaws.com
October 15, 2015

ec2-184-73-204-40.compute-1.amazonaws.com
October 13, 2015

ec2-23-23-245-196.compute-1.amazonaws.com
October 13, 2015

ec2-50-19-243-122.compute-1.amazonaws.com
October 7, 2015

ec2-54-243-145-63.compute-1.amazonaws.com
October 7, 2015

ec2-23-23-132-162.compute-1.amazonaws.com
September 10, 2015

ec2-54-225-189-195.compute-1.amazonaws.com
September 10, 2015

ec2-54-243-98-4.compute-1.amazonaws.com
September 1, 2015

ec2-54-225-70-91.compute-1.amazonaws.com
September 1, 2015

ec2-54-225-155-48.compute-1.amazonaws.com
August 27, 2015

ec2-50-19-104-253.compute-1.amazonaws.com
August 27, 2015

 
Showing 30 of 54 IP Addresses

File downloads found at URLs served by get.default-page.com.

 
Latest 30 of 602 download URLs

The following 4 files have been seen to comunicate with get.default-page.com in live environments.

URL:
http://get.default-page.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Microsoft-IIS/8.0 (ASP.NET) (Version: 4.0.30319)

Facebook:
Shares:  2

Statistics are for the previous month.

Remove Malware from get.default-page.com - Powered by Reason Core Security