inst.pricegong.com

PriceGong Software Ltd  (via a Proxy Registrant)

Domain Information

PriceGong.com is a compartive shopping web browser plugin that is distributed on pricegong.com as well as bundled with third-party software downloads. PriceGong Software is based out if Ramat Gan Israel and run by CEO Bar Elimelech. The domain inst.pricegong.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2008. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Monroe, Louisiana within the United States which resides on the Akamai Technologies, Inc. network. The domain is associated with the publisher PriceGong Software Ltd who is located in Ramat Gan, Israel.
Registrar:
GODADDY.COM, LLC

Server location:
Louisiana, United States (US)

Create date:
Monday, December 8, 2008

Expires date:
Friday, December 8, 2017

Updated date:
Wednesday, December 9, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PriceGong.J, PUP.PriceGong.S, PUP.PriceGong.Installer (M)
100.00%

Dr.Web
Adware.Shopper.327
88.89%

ESET NOD32
Win32/Toolbar.Conduit (variant), Win32/PriceGong (variant)
77.78%

Boost by Reason
Optional.PriceGong.J
55.56%

Trend Micro House Call
TROJ_GEN.F47V0209
44.44%

Quick Heal
Adware.PriceGong (Not a Virus)
44.44%

Emsisoft Anti-Malware
Adware.Win32.PriceGong.AMN
44.44%

Microsoft Security Essentials
Adware:Win32/PriceGong
44.44%

Avira AntiVirus
APPL/Day.DK
44.44%

Malwarebytes
PUP.Optional.PriceGong.A
33.33%

IKARUS anti.virus
AdWare.Win32.PriceGong
33.33%

Comodo Security
Heur.Suspicious
11.11%

Clam AntiVirus
PUA.Win32.Packer.WiseInstallerStub
11.11%

The domain inst.pricegong.com has been seen to resolve to the following 5 IP addresses.

January 4, 2016

a23-3-13-75.deploy.static.akamaitechnologies.com
December 30, 2014

a23-3-13-83.deploy.static.akamaitechnologies.com
December 30, 2014

a23-0-160-25.deploy.static.akamaitechnologies.com
September 3, 2014

a23-0-160-19.deploy.static.akamaitechnologies.com
September 3, 2014

File downloads found at URLs served by inst.pricegong.com.

9 / 68      (Adware)
http://inst.pricegong.com/inst/.../PriceGong.exe  (b69df2faf06f57e273326913970c0549)

5 / 68      (Adware)
http://inst.pricegong.com/inst/.../PriceGong.exe  (4ce73d78387a5298c73722a50a3478fe)

1 / 68      (Adware)

2 / 68      (Adware)

5 / 68      (Adware)
http://inst.pricegong.com/inst/.../PriceGong.exe  (2d679a3b8270569e0d49e1b915c03e9e)

10 / 68    (Adware)
http://inst.pricegong.com/inst/.../PriceGong.exe  (4316926247f28132d8c400469ab43dab)

5 / 68      (Adware)
http://inst.pricegong.com/inst/.../PriceGong.exe  (80bb969ed682703f7cff280b85d4b20e)

0 / 68
http://inst.pricegong.com/.../uninstaller.exe  (44c2176016f44b8ce69377dc36b7eeef)

10 / 68    (Adware)
http://inst.pricegong.com/Inst/dist-1/.../PriceGong.exe  (58043cf1e3e52e3e710d68dea9dbe492)

10 / 68    (Adware)
http://inst.pricegong.com/Inst/dist-1/.../PriceGong.exe  (1615f0bcf91207748c07e48b979b1d4a)

The following 30 files have been seen to comunicate with inst.pricegong.com in live environments.

 
Latest 20 of 30 files

URL:
http://inst.pricegong.com/

SSL certificate subject:
CN=*.pricegong.com, OU=Globe Standard Wildcard SSL, OU="Provided by Globe Hosting, Inc.", OU=Domain Control Validated

SSL certificate issuer:
CN=GlobeSSL DV Certification Authority 2, O="Globe Hosting, Inc.", L=Wilmington, S=DE, C=US

Web server:
Microsoft-HTTPAPI/2.0