home

install-cdn.getmyprimaryresult.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain install-cdn.getmyprimaryresult.com is registered by proxy through GODADDY.COM, LLC and was originally registered in January of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Tuesday, January 13, 2015

Expires date:
Saturday, January 13, 2018

Updated date:
Monday, March 21, 2016

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
getmyprimaryresult.com

Whois:
2 getmyprimaryresult.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!5B583E538B86, Artemis!341870F1506D
100.00%

K7 AntiVirus
Trojan
100.00%

NANO AntiVirus
Trojan.Win32.Yontoo.dnkubo
100.00%

F-Prot
W32/S-9c4b2ea6
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0314, TROJ_GEN.R02SC0ECQ15
100.00%

Dr.Web
Trojan.Yontoo.1016, Trojan.Yontoo.1734
100.00%

Sophos
Generic PUA HD, Generic PUA FP (PUA)
100.00%

Avira AntiVirus
ADWARE/BrowseFox.Gen2
100.00%

Vba32 AntiVirus
AdWare.MSIL.Agent
100.00%

Baidu Antivirus
Adware.Win32.BrowseFox
100.00%

IKARUS anti.virus
AdWare.BrowseFox
100.00%

Fortinet FortiGate
Riskware/BrowseFox
100.00%

Qihoo 360 Security
HEUR/QVM30.1.Malware.Gen
100.00%

Reason Heuristics
PUP.BHO.Yontoo, PUP.Yontoo.PrimaryResult (M)
100.00%

MicroWorld eScan
Adware.BrowseFox.CB
100.00%

The domain install-cdn.getmyprimaryresult.com has been seen to resolve to the following 13 IP addresses.

104.96.220.170
a104-96-220-170.deploy.static.akamaitechnologies.com
May 16, 2016

104.96.220.169
a104-96-220-169.deploy.static.akamaitechnologies.com
May 16, 2016

65.158.47.104
April 18, 2016

65.158.47.64
April 18, 2016

23.62.6.75
a23-62-6-75.deploy.static.akamaitechnologies.com
April 13, 2016

184.51.126.123
a184-51-126-123.deploy.static.akamaitechnologies.com
April 6, 2016

184.51.126.136
a184-51-126-136.deploy.static.akamaitechnologies.com
April 6, 2016

72.247.8.123
a72-247-8-123.deploy.akamaitechnologies.com
March 3, 2016

72.247.8.160
a72-247-8-160.deploy.akamaitechnologies.com
March 3, 2016

23.15.8.201
a23-15-8-201.deploy.static.akamaitechnologies.com
February 22, 2016

23.15.8.200
a23-15-8-200.deploy.static.akamaitechnologies.com
February 22, 2016

23.62.6.50
a23-62-6-50.deploy.static.akamaitechnologies.com
February 6, 2016

23.62.6.64
a23-62-6-64.deploy.static.akamaitechnologies.com
February 6, 2016

File downloads found at URLs served by install-cdn.getmyprimaryresult.com.

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015031313&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015031318&bet=3  (primaryresultbho.dll)

27 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015032416&bet=3  (primaryresultbho.dll)

27 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015032321&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015031612&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015032214&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015031617&bet=3  (primaryresultbho.dll)

27 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015032507&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015032006&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015031915&bet=3  (primaryresultbho.dll)

26 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015032118&bet=3  (primaryresultbho.dll)

35 / 68    (Adware)
http://install-cdn.getmyprimaryresult.com/bed?r=2015031520&bet=3  (primaryresultbho.dll)

The following 117 files have been seen to comunicate with install-cdn.getmyprimaryresult.com in live environments.

TCP » 104.96.220.170:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.169:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.169:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.170:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.123:80
plugincontainer.exe

TCP » 104.96.220.169:443
kometa.exe (Kometa by Kometa Authors)

TCP » 23.15.8.201:80
apptrailers.exe

TCP » 104.96.220.169:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 104.96.220.170:443
kometa.exe (Kometa by Kometa Authors)

TCP » 23.15.8.200:80
desktop.exe (Desktop by New IT Solutions)

TCP » 104.96.220.169:80
odkajcgajjameflfifmigkljbnegpioc.crx

TCP » 104.96.220.169:80
nnbkabnhfnkjahnippapmabjlgcgpffh.crx

TCP » 104.96.220.169:80
ojdaeimelhcblkkbmmobomiokbgdkdjc.crx

TCP » 104.96.220.169:80
bgdhngbgdicgpaajfmllbfdnfiaokcdp.crx

TCP » 104.96.220.170:80
bhdacfhkhgcllipeagaffkbnifgjldoc.crx

TCP » 104.96.220.170:80
fdbmjlgfdkhinoaaadlocbpijlbnijdn.crx

TCP » 104.96.220.170:80
jobahlkejeejigafpkoghejpnccihgcf.crx

TCP » 104.96.220.170:80
pmnnomhnpajkdgjpgffnphooamboiogk.crx

TCP » 104.96.220.170:80
nedmkhahhppfofnniinaggmabnngddjk.crx

TCP » 104.96.220.170:80
hdheajejbpeacoiechhgeopdnpihmocd.crx

 
Latest 20 of 125 files

URL:
http://install-cdn.getmyprimaryresult.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.