The domain install-cdn.reversepage.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Akamai Technologies, Inc. network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
New York, United States (US)
Create date:
Tuesday, March 18, 2014
Expires date:
Saturday, March 18, 2017
Updated date:
Saturday, March 19, 2016
ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.BHO.Yontoo, PUP.Yontoo, PUP.Yontoo.ReversePage (M), PUP.Yontoo.ReverseP (M)
100.00%
MicroWorld eScan
Gen:Variant.Adware.BHO.Agent.4, Adware.BrowseFox.BQ, Adware.BrowseFox.BJ
81.82%
nProtect
Trojan-Clicker/W32.Agent.249624.B, Adware.BrowseFox.BQ, Adware.BrowseFox.BJ
81.82%
McAfee
Artemis!CD96DF17AA75, Artemis!1973CCD333BA, Artemis!4AAA040C47D5, BrowseFox, Artemis!A3957DC36C4D, Artemis!5D1F5D62B7A9
81.82%
Malwarebytes
PUP.Optional.Zebar.A, PUP.Optional.ReversePage.A, PUP.Optional.JumpFlip.A
81.82%
SUPERAntiSpyware
Adware.BrowseFox/Variant
81.82%
Agnitum Outpost
PUA.Agent, Riskware.Agent
81.82%
F-Prot
W32/BadBHO.AW.gen, W32/S-7bed2e86
81.82%
Trend Micro House Call
Suspicious_GEN.F47V0807, Suspicious_GEN.F47V0110, TROJ_GEN.F0C2C00LH14
81.82%
Clam AntiVirus
Win.Adware.Agent-7675, Win.Adware.Browsefox-172, Win.Adware.Browsefox-410
81.82%
Kaspersky
not-a-virus:AdWare.Win32.Agent
81.82%
Bitdefender
Gen:Variant.Adware.BHO.Agent.4, Adware.BrowseFox.BQ, Adware.BrowseFox.BJ
81.82%
NANO AntiVirus
Riskware.Win32.Agent.czmzab, Trojan.Win32.BPlug.ddwtte, Trojan.Win32.BPlug.dfogbn, Trojan.Win32.Yontoo.dnkubo
81.82%
Emsisoft Anti-Malware
Gen:Variant.Adware.BHO.Agent, Adware.BrowseFox.BQ
81.82%
Comodo Security
Application.Win32.Altbrowse.AK, Application.Win32.BrowseFox.JM
81.82%
The domain install-cdn.reversepage.com has been seen to resolve to the following 16 IP addresses.
a104-96-220-122.deploy.static.akamaitechnologies.com
May 18, 2016
a104-96-220-184.deploy.static.akamaitechnologies.com
May 18, 2016
a104-96-220-162.deploy.static.akamaitechnologies.com
May 17, 2016
a104-96-220-115.deploy.static.akamaitechnologies.com
May 17, 2016
a23-220-148-17.deploy.static.akamaitechnologies.com
April 12, 2016
a23-220-148-40.deploy.static.akamaitechnologies.com
April 12, 2016
a23-15-8-201.deploy.static.akamaitechnologies.com
March 13, 2016
a23-15-8-217.deploy.static.akamaitechnologies.com
March 13, 2016
a23-62-6-35.deploy.static.akamaitechnologies.com
February 28, 2016
a23-62-6-59.deploy.static.akamaitechnologies.com
February 28, 2016
a23-0-160-19.deploy.static.akamaitechnologies.com
February 10, 2016
a23-0-160-73.deploy.static.akamaitechnologies.com
February 10, 2016
a72-247-8-178.deploy.akamaitechnologies.com
February 2, 2016
a72-247-8-144.deploy.akamaitechnologies.com
February 2, 2016
File downloads found at URLs served by install-cdn.reversepage.com.
The following 153 files have been seen to comunicate with install-cdn.reversepage.com in live environments.
URL:
http://install-cdn.reversepage.com/
Web server:
Microsoft-IIS/7.5 (ASP.NET)