home

rhtag.com

INTANGO

Domain Information

The domain rhtag.com registered by INTANGO was initially registered in April of 2013 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Thursday, April 18, 2013

Expires date:
Monday, April 18, 2016

Updated date:
Thursday, March 19, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Whois:
3 rhtag.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AstroDeliveryFriedCookie.e, PUP.FreeSoftware.e, PUP.ClickYes.e, PUP.Tightrope.Bundler, PUP.Installer.InstallCore.Installer, PUP.InstallCore.Installer.Installer (M), PUP.Outbrowse.CLICKTOSTART.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.Outbrowse.BESTAPP.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Outbrowse.MAXTEK.Bundler (M), PUP.OutBrowse.StartPla.Installer (M), PUP.Outbrowse.MARiMara.Bundler (M), PUP.DownloadAdmin.CodeTech.Installer (M), PUP.ProfitServis.VUDGOFF.Bundler (M), PUP.Outbrowse.StartNow.Bundler (M), PUP.Outbrowse.BestApp.Bundler (M), PUP.Outbrowse.ClickYes.Bundler (M), PUP.Outbrowse.OtopiaSo.Bundler (M), PUP.Outbrowse (M), PUP.InstallCore.FC (M), PUP.DownloadAdmin (M), PUP.OutBrowse (M), PUP.Air Software.Installe.Installer (M)
100.00%

VIPRE Antivirus
InstallCore, Vittalia Installer, Threat.4784459, DownloadAdmin, Threat.4782551, Threat.4786018, Threat.4150696
14.00%

AVG
Generic, Downloader
14.00%

Dr.Web
Trojan.InstallCore.15, Trojan.OutBrowse.6, Adware.Downware.2220, Trojan.DownLoad3.35287
12.00%

Sophos
Generic PUA OL, PUA 'OutBrowse Revenyou', Generic PUA DF, PUA 'Install Core Click run software'
10.00%

Avira AntiVirus
ADWARE/InstallCore.Gen7, ADWARE/Adware.Gen, PUA/InstallCore.Gen7
10.00%

McAfee
Artemis!152897CDF91D, Program.Adware-OutBrowse.c, Artemis!1E6F5E1681D2, Artemis!9BA457EE6E51
8.00%

ESET NOD32
Win32/InstallCore.RG (variant), Win32/InstallCore.SC (variant), Win32/DownloadAdmin (variant), Win32/InstallCore.UE potentially unwanted (variant)
8.00%

Baidu Antivirus
Adware.Win32.InstallCore, PUA.Win32.OutBrowse
8.00%

Malwarebytes
PUP.Optional.BundleInstaller, PUP.Optional.OutBrowse, PUP.Optional.DownloadAdmin
8.00%

K7 AntiVirus
Unwanted-Program
8.00%

NANO AntiVirus
Trojan.Win32.OutBrowse.djogzg, Riskware.Win32.Downware.djahkt, Riskware.Win32.InstallCore.dnazrt
8.00%

IKARUS anti.virus
PUA.OutBrowse, Trojan.Dropper, not-a-virus:Downloader.FrieCook
8.00%

Trend Micro House Call
Suspicious_GEN.F47V1118, Suspicious_GEN.F47V1204, Suspici.7B6A9C43
6.00%

Fortinet FortiGate
Riskware/InstallCore, Riskware/OutBrowse, Riskware/FrieCook
6.00%

The domain rhtag.com has been seen to resolve to the following 2 IP addresses.

108.168.157.83
108.168.157.83-static.reverse.softlayer.com
May 3, 2015

108.168.157.121
108.168.157.121-static.reverse.softlayer.com
November 29, 2014

File downloads found at URLs served by rhtag.com.

1 / 68      (Adware)
http://rhtag.com/adServe/.../LNn896fGgmyiRSVAeHAjKc4Q3XyopZmYqLwYKBVCZPaDcC 0M23i 2keQfBfrxu5uCjBA5MJtbsptFIaykkJMOriA==&ui=yPiRdFa7SmR51z6xQVGrsMcaKRMNtL4xAHRnlXZ BVFfOs6pRz69qC84NMG9plcp&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFVfP1gUl40WU8GAS3M7y6Txato6iFYCMf06o0jdqwCcXciMEbOPmCyBrNAZvM6b9Vb2 PmEsunx5Bus9nsHjogeeuGHkbGiAlnG7t0EcqmsugXQlLhBEY gyFZ11t2TjEm7oap11IReiAEU9 oMuicBUj6Ntup773ukpAS2JFSot7gd1EHmC7hjxEQ08wPL7iPGt/9fjMKhx7hQ==&ui=vQwRGiJ/.../12mUjgLJO6yplwt4H9OcokF2pCCHM4bi6&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFXOKJy1JwYAeMYDnc1IfbfYOsJCVnV6Q7Rs0aHzp s1bU3DevWP9Zl7OVlsYnjqqH8 Km7t8BTjlKreUb3tNQ7KqyI8usOp/REE4y0g4z6pWe yhQeXjFKmGaRXa0FDAymLmCCPmzWA0whg jJ55OEsg0zU8GJ87MWI671/6BW/nohcUk/hfQojSSrzoxfFj5CJ/cp8YdEIpowqQ50GchGbfm/It k/Wu5tXD39BC6xUMK c1zzfDE7MCNWG vg62B0mYhEUt2SdCpN7kj3j6qiNW4XYqxnadacNDTzA8 vuI8a3gKfHiy9A9j&ui=lrZQuK6EB4peIC/Qinnp8lY37AsT2Aewx0CywtgdH5Fn1HPIEMyAV8tB7J/.../wHI&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV9 ADYF6l6wJ3bRqAsgD2sfV6C0sfQH3hhAX04ErFI7IuqtQzErLtkL0Da4YcRJRl/G 1Uzo9zguSHU3sIquCPBxUa2NzcsvRSANh/s2P/4yacP0JCdUHiE20xi5lW3YpYz9/chRnaibqVJ6 G5aYvUR9BpoOL IGFAUwra98siXOwYQumcnxa2Owy6nLSy3dZqauEU7M7XDgyHvooDlbXwrr4hRk 19H6zmbVtUYJgZMxhEbC0UbBVoXCHtMCYAwB1AbS3HuAnJnZfn3yzqky3fRgBhc9oSMzKl7B5kMu lVf6Jw==&ui=HPXDbpFepZT7GvV8u475s/.../12mUjgLJO6yrVtUYJgZMxhERHr7Z07Z7D&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFU KC9D3ukAfByWKKvk8eBABfNju9ObTCBTOlVSBHk55bqFJSW quhSfpTdOsFEIkWX 7KQCFXtliOUFjCfKMWEOtTaLAU1op40Z5shhCjrSTL3Xfktnym2uNAo2uQiMMwCSDCfvIM6RgfY YSy6fHkG6z2eweOiB576 J7z7Cr0DQ70sCjuHHHR5g/WjLQAQl0YT5EkVBx4tiRWv1IoXw8KJuyw DGbYNFHThY8AEMjKu0zRmpWwMKFEYTijlpgXyRC5v4wcluODqGWSQsQHXjql&ui=gh9VG786rh0tSOwzs76ue/.../12mUjgLJO6yo8nVS1EjEJQScrQOxU6OYf&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFVfP1gUl40WU8bIr5jableYlBRXO I1CSeWpJgmfF3d5Ga8wenLYHety5zVRao8tCF7 YhL6XJOJze0BzhPBe/EiYa3qQvnObIu3/LudreVuLs0HEiGpdELiSJxA7N9SurwUcWXCKk3pJeTu L3X5WWgh1gfyyOExZs2cXYQ3FcmRaPY YSy6fHkG6z2eweOiB576 J7z7Cr0DQ70sCjuHHHR/W2Z 43WfojT2e0Mm89jVye E/.../12mUjgLJO6yq uj4m6IZ6k4xk0ipLalAu&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFVurQt5fBrzGsiSCatXxlS068xpWAiAW69n6j/CE9YMnv1M4 yx0gRHBt5LUVQm XN4 7tNLZ/CUygFmwa4dNdynUOsDfWB0n8onBOlBdT4mc9RJ04CS4NE 2ce aHcOeoa91zl6cpmVHWMt PRZjBxJCqU2GDkDNSnAwra98siXOwYQumcnxa2Owy6nLSy3dZqaWGUyW4QGigrYdsYIjdgp1hLqW iAnI9nDKkq IyAyorutzi7197OE35zoyVGvq70h8tgoUW4NSrLYCWAuCQW1motFH/.../12mUjgLJO6yrKkq IyAyorknWZJoI5Y5x&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV/b9am0ZXhwhgZeEyTo1Nv1TB27jRw4YYdifjOeO9v7umSdx4QIvQDKBhIy9o/VuNZ2 VdKBbsuOuaqlbFSRq CyOE3ZFUWzfEQCrVJSbVNLwDzsJ2Yu8PHJJUTnarPp7Vmu9i/U30wBIuc6 MlRr6u9ITMpAQEniEv 5tzvhPVDEJlPdS7dAtRZBow/Y1Hiy1cNFbYTgiY2ApA==&ui=EjwceJOXo3p4AP92j2Hxk5oBu3I/.../CnlqB 28ZcY5c LZSFH&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFUc2xR9z/dRWxXNi06ZK VVGV7WYuAsyG5WHKgojFsIkZVdfgPeFZhAFrzd3sGI8YYJ WLjM7TIk6mYMQZqrp7a3LED2BEhrA4SIQwRblWL/UBdFM7IgOTPbks/8Q5M2HpwkOa4tirwCQFR7 KJ47RWeVguKiSIlyw94GEjL2j9W41nZV0oFuy465qqVsVJGr4LLdg3PfPPMKw0WM PHv1DSUcVal Y90JexBV067xKRpswzyX5bgVaYQMAGlbj7H9KidZMB9oXbbuU16NEWb9w7dNT6 zdwmJu6tzYHcU QNOYx4B6qxR6k5xY&ui=mznmkKyvwj1J wRSbN kwPbWwvziNp/1yuFXe 8mR4PZ dG/.../4lj64It &src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV vHYt z9D8Tb7BRuJPmkR zl KqwRHHRccgoAR42HqahgC3Ziw16K11xJHrsgS9mih L09SRLSt8/OyZAcOzH9Jh/XxP0KkeoKpWmi2GiK8vPduUytqZIVOCToMrbdRnhAO9LAo7hxx0UMV jV3GDq8BX8fsDgbL5BZ6qm5Nkraa6CYq1xnYJi5LXZKKZAlKY9VjNPYQZlgHslUgjAdgBMtYvP1x ts dDJ/91I3kZ7BVJMSgPThUm/.../xfWmFPBiFY37AsT2AewDMRlDug0DrYKcM1eYYzMDG1eU9oQWbLI&src=BANNER&bt=banner_728x90_91  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://rhtag.com/adServe/adClick?ai=e78pZMpPz6TWZEaZboedZNcHBe6x5dP0sBdEAn7mBCQPvPD9pSRsFudT9/rqdGoQs0/qbKYlfMaQ wRR/HA97EnQda93LGDuvzqPK3OGiEb9PnB2V8hoiBdqIcGwFtXfy1v2JbB7ryhwGEjL2j9W41nZV 0oFuy465PiVWCtsKwD6sFnB eWnMmSkcfjxyLbCbHtFhAOqBDNpIxfoj6ZwCTBRoOf8YkZ/BKKSX JgiWsk1A xoWlZU/RWbASbUjJTJyow/.../12mUjgLJO6yq8w4JCkKe8eFHiSYXbRewF&src=BANNER  (installer_adobe_flash_player_english.exe)

11 / 68    (Adware)
http://rhtag.com/adServe/adClick?ai=e78pZMpPz6TKVRKtI8wPnZ1 z7KsEv3NeArUsd3ooWVFV1dbho4ml2jllep53PP Hl8LF1f1WPJF V1dbho4ml5I1vXQHfOYFgjDQxnXoryguBarEhJFKAnc5HZ080OAzDQ5Kae87p1/.../1M6kYjljalfx9DhYLRgUi8cpglJGw8QAz&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (PUP)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV9sUaX073FGhdLtoQawIHHRVogUQK7rTn5aLPzJ8mprTPwzUtx4sjZZijdt7UINSMRp MHKbDuOFFPgRnrjQP6z4CUn/syRad3sPxnctUv4J30cHb4p9yGjmzlwSSdUyoGtSehuWmL1EfQaa Di/iBhQFMK2vfLIlzsGELpnJ8WtjsMupy0st3Wam6HPkInOsR SGGBUz74HQmThRf13h4EPOWJ0C /.../luQbZXojReTATi&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV9 ADYF6l6wJ8DEOQ5PVyVcVbpODpUN3XwnfFxV4gbCXkpQv9KsT0gCnjx5B9lc5K1Q wqZyrDcWwUXZhjhhN28/.../lC UtkpEKZgUqi NcuJzaGmiJ58UUcximwWrs0lRgPlnHnDJYOlscQ8g61hQsfObN7kxD99l4sXxEP11wBKUgZVA H4 SFof23BtYle72CZ0&ui=daHfVq2uxoSHVf FgD7hyVY37AsT2AewDMRlDug0DrYkotOo9HpCbKkwdvpG5OcP&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=rzP1JV4jgJV/rDKrl/9SwsKlrNNAZxzy2EYiDA9dy3dCpQ2N5n0usvCEBpNftX6ygfVY5nyYqOkZ a3tE3PiFsLntxC6Q7NiHulm03hnyOyD/a/H73qgIKCKO61E49b2JMKMktpQTy8phQHY30FNiSi6W j3jr Cp8E15yz728krUKoUv4wzjA1YFd2rNK35DNgmGw kTpOBIpdY e/iTnmsSSBjDcfTAccunU QFtYFS0gHoQkPfLa9Xr0sDMHEyo90LNabjD43WLkaJG84Fo6EnV6bTU2wU1E3CjX2O9QZEc=&ui= n9b7xwMd5xKBHZ1pcTis/.../rJuPw4&src=BANNER&bt=banner_728x90_56  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV tmZpxr48hhdkONWWzuA/30pA4CZ0tPvgwgDJkmjgtTDrvX/oFb eiFxST F9CiNJK vOjF8WPkIhbVf2tLLlxMCpDnQZyEZt Wb8prwICRcgh/qaXsaeEmWlAXWMFGotc1Yb6 DrYHSZOo wis mwFNQdAusxdM9jF7dMcJ/.../12mUjgLJO6yqdGhBqS1SMTyXb MEIaf4I&src=BANNER  (installer_java_english.exe)

1 / 68      (Adware)
http://rhtag.com/.../adClick?ai=dxYyzVlXuV8nVFb04GmoShozvVK0fMwHeTK_cqhey7ZhoNH4yK91VscKxl6opfrJWwTFKBt-lx18Sp0y0yo73SDDEPvwwdnCfVSVBHcJX0KGxLhu9eeMYSazT_aiagvjn8YTXq7NO3TwEdjEYgaRPQPgcuifKRjch_XxP0KkeoKpWmi2GiK8vPduUytqZIVOufBbO9p93f4O9LAo7hxx0TbqWa9ajlWRTqr5IaPzfV-J0j4DYDlEhZrXStK-OQVz5vZrWB8y101LIFxl5HI7cQBJ8Tltrfh1fPgL-IA9QXaIFk7Pv4YdDekcMYW7qJ1_idOYhoBMwaNdt4UkUYpen54rLkcFYcyqR3X6k5oIFC-JSsPAp_w5fA&ui=27ZzRbUgHCTBrDqSWj2zbfbWwvziNp_1dII1hxzvyCdT-IcVygIaSNXVOcJE0r4d&src=BANNER&bt=banner_10x10_11  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFUSmws74kOHfrVBrMah5 0rgXXMbGFb/GUJSkDpR3ljkHQOOYkn6hp99NChnfUdXZ2b UBaAQuTCzCTzwyp4HA4TQDw1d7ubKlsS/zBaWlv3A/.../6f&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFV3Hu7LExqDxV61IgH86IynDrcjUzPkQ4N88J8dYUrnNjVGdbQStuZGUlQHhwIynOEN 18qKWZmKi8GCgVQmT2g3ZBEh7lphxL4pdY e/iTnmjRWNAOSW2SXJPhqHyUFKnXAdt0V1 lNkmAt 7Qus8gY83Erl/KNvPfA BbN9X7qnPnf5LTvHSP7fCfT2x3Gt75w1ksAx6i4xhw==&ui=VD21hbC00u5ZdMtrVdxxTwcsWc8 Vo/0lA4kOHjhy4bXzQFOqo/.../3kG&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFXuAx489KtPAN0F08qTmcv1uM5PuOLVjwrFJdAhdw2cLTchSR/TWXVWWQgd9VEKEs 8 gGwCRvHcevZtdChUYu0hVrU/0f0Xyj/TJgebFRUjlPbe21rmmtwOe6Tog9W61Sd4H2p7XgiON31o zgvc/av/UlQHhwIynOEN18qKWZmKi8GCgVQmT2g38gSKzTDqd rtt8nH/2lE0Lf8Eur8aalDROj/ 7iWToeWWqJuva3rSHJx5wyWDpbHEMkxsua0ZBelxs2XlLlifCLvVSLO 0pXgDe6E5DWof4U=&ui=1YuW55wARCZiPpweCUMluPbWwvziNp/.../jZAHJ9ceDzCSgZM8YR&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFWXawgDeuMY7JcBE4tQjNjOBObrsD /JFN1apBk9aZli18nIQh1Lb6XXxp 41pRp2kh YgaK3vFSFYqv9I5AGe1M86h4A8TlYOmvm/mmcilE3UgN/.../ZZJC xAdeOqU=&ui=HgG3JYIcaKKQ9GEgoE2Y6ZmqLhDpWjFVlA4kOHjhy4aD tNKHYlRJ7WsoSuDNbXl&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFXULz0Q gfum3I9P 4044lXMEtUbBjfGsxsU8aOT BynatWwbPBgE4c51/85WYhPbHx OmJhErVyG67kYw8ogoXGazQ1WJ8OssoTBIyakaQuKAULp3jzDGTLhh11MNiP6F8Q4Q2d7gqWaKNI lvsjCmgYMK2vfLIlzsGELpnJ8WtjsMupy0st3WamzU/klEEBb7OyKY4t/d2oxIy7zwhNi7ecxEil 4boaG7 y7vrHD80Elec6MlRr6u9Ili5yav89/.../00R8TBbZ2GNAy3mtI=&ui=btR96rz1dnl0fPeyhOEVmFY37AsT2AewDMRlDug0DrYdpXA6QSP5ls57CcOgOTCg&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFUc2xR9z/dRW7FlGksiAD7CBOxk8lieUhZOJdhfKeSf9Gq6dKQhpiQTmPRTAYQ4bPvW Ujg8yuvbBd O/ULvuJg/exgmxfiigDvacgCXyr2Bs 15wmKaNS03cM ZWG/.../243kzI 60wGUaQQOu9f gVv56IXFJP4X0KI0kq86MXxY Qi4t37WgFM8TIKkOdBnIRm384 KUHLy0Vow1yd M78Mssq51LEPThB8UEBJ3zk7KjmHmIRFLdknQqTn6MANFvFKsA430fJferO4xS8dcPmtvgNlkkLE B146pQ==&ui=nu7mDOWBqRaBsfUzbDvvoYBVNmK1S2tVmTIMbcPs0iqHWs4orr1t4e8zMAnRMpaR&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFWuFuXbLMU3llazOitvZeBkURxMTYWj QLOI53MaDHNd3VKvx2qp2TAE15yz728krUK oUv4wzjA1YFd2rNK35DNgmGw kTpOBIpdY e/iTnmmZWku5Tc4mUcunUQFtYFS0VD0vp1Q9/ca6c /Dcv/.../j oMNgfpKMV3XJp0uc727iYxkhF8sdCfxm9RhtIZZJCxAdeOqU=&src=BANNER  (installation.exe)

1 / 68      (PUP)
http://rhtag.com/adServe/adClick?ai=dxYyzVlXuV8kk9mwaeFCrazlv51cviWuztpzh9c8RfwTXnLPvbyStQqhS/jDOMDVgV3as0rfkM3k ntHZ RjNVDv0OzHFpo4i6wdFanFBVMCjTMq0/.../c6Wv3UjeRnsFUkxKA9OFSb 9Y=&ui=je76diu rFEfnsHiqTtGc1Y37AsT2AewWsS4PDlNkszDoLTcweDtWdlMYiej0RP2&src=BANNER&bt=banner_10x10_9  (installer_java_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFU KC9D3ukAfLV74Ayaanpj/4ZvWa4jm/.../3ciyLw42feeUEaJ2olA4kOHjhy4Zws54qQbtSzfixL9Cdxy f&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=e78pZMpPz6TKVRKtI8wPney4L/NgvCRF3 S3HX44/o p1CsBbN4wTrc7x 04vgqXi7gjOPjqPLXl fqrxqq1J1qMqSdAo0acTplND/5ncA6h104Vca5VofC3i1ql1VFCxq5mYRSR1WMxxVTfDetbFubKl GRlxVYjfOu9f gVv56IXFJP4X0KI0kq86MXxY QiVHZ Wo2TJJDy2x A QwNYoZixu4xnZ14De6E 5DWof4U=&ui=hbUl/j /s1SvogKEgjbQ8PbWwvziNp/.../Nmt2oo3F TERAg&src=BANNER  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFU KC9D3ukAfMcBSeh ao3H2BiMmkIl4/DWn27dlhfnK1Yqv9I5AGe1M86h4A8TlYOm vm/mmcilE3UgN/Lt7hQC7bfJx/9pRNCqK7jzp7oowXE2zkRo6Q2N6MaPqjQOEiYEcoE35OcZ0t7F CTVziXHXdXnO3fByb4jrI6dGg8piWSFChtcedPzhKIBbS FaaIo=&ui=jVdjQTCnUh0BTalnYKanefbWwvziNp/.../nWAAjTtMd9&src=BANNER  (installation.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=e78pZMpPz6Q3JcS01JRKQwOOrmMsj8Mwxdbs3Y98AJkRnTORORmTUEXkj2tTD9B/9j5hLLp8eQbr PZ7B46IHnk7Uu7mv5Y2sYt7DQpXIzaXLopmqvDyKGXQvqUFlCIwUnuTZvfyYX4g=&ui=4SNAmqQ86B8c1j89lhwWR/.../1M6kYjljalfyzyL1GG4yzSGY4T 3OiB30&src=BANNER&bt=banner_300x250_16  (installer_adobe_flash_player_english.exe)

1 / 68      (Adware)
http://rhtag.com/adServe/adClick?ai=08zHTxdapFUPZbIUE/ApfGjpnlL4FENJ ejM6ohJR67ga/qqZKsJ 3gNzAQo4Bsnpn/.../&src=BANNER  (installation.exe)

 
Latest 30 of 125 download URLs

The following 44 files have been seen to comunicate with rhtag.com in live environments.

TCP » 108.168.157.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
UCBrowser.exe (by UCWeb)

TCP » 108.168.157.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 108.168.157.83:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 108.168.157.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
UCBrowser.exe (by UCWeb)

TCP » 108.168.157.83:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 108.168.157.83:80
UCBrowser.exe (by UCWeb)

TCP » 108.168.157.83:80
UCBrowser.exe (by UCWeb)

TCP » 108.168.157.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
UCBrowser.exe (by UCWeb)

TCP » 108.168.157.83:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 108.168.157.83:80
browser.exe (Speed Browser by Smart Applications)

TCP » 108.168.157.83:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
browser.exe (Browser)

TCP » 108.168.157.83:80
browser.exe (speed browser by Smart Applications)

TCP » 108.168.157.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 108.168.157.83:80
browser.exe (speed browser by Smart Applications)

 
Latest 20 of 69 files

URL:
http://rhtag.com/

Title:
“Contact Us”

Web server:
nginx

Facebook:
Shares:  8

Statistics above are for the previous month of March 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.