static.ys4xubkqt.com

Whois Privacy Protection Service, Inc.  (Proxy Registrant)

Domain Information

The domain static.ys4xubkqt.com is registered by proxy through NAME.COM, INC. and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Kirkland, Washington within the United States which resides on the eNom, Incorporated network.
Registrar:
NAME.COM, INC.

Server location:
Washington, United States (US)

Create date:
Friday, February 27, 2015

Expires date:
Monday, February 27, 2017

Updated date:
Thursday, March 24, 2016

ASN:
AS21740 ENOMAS1 - eNom, Incorporated,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.GenericKD.2196010
100.00%

Malwarebytes
PUP.Optional.MixVideoPlayer.A
100.00%

Norman
Obfuscated.gen!r
100.00%

Trend Micro House Call
Suspici.5C7004B2
100.00%

avast!
Win32:Dropper-gen [Drp]
100.00%

Lavasoft Ad-Aware
Trojan.GenericKD.2196010
100.00%

F-Secure
Trojan.GenericKD.2196010
100.00%

Dr.Web
Adware.Siggen.31174
100.00%

ESET NOD32
MSIL/NewPlayer.A potentially unwanted (variant)
100.00%

IKARUS anti.virus
PUA.MSIL.Confuser
100.00%

Baidu Antivirus
PUA.MSIL.NewPlayer
100.00%

Qihoo 360 Security
Win32/Trojan.463
100.00%

The domain static.ys4xubkqt.com has been seen to resolve to the following IP address.

rc2.sjl01.dmtracker.com
March 31, 2016

File downloads found at URLs served by static.ys4xubkqt.com.

12 / 68    (PUP)
http://static.ys4xubkqt.com/.../MixVideoPlayerSetup.exe  (5cfc3c37cf6a9c31f96720642d1f25dc)

The following 35 files have been seen to comunicate with static.ys4xubkqt.com in live environments.

 
Latest 20 of 47 files

URL:
http://static.ys4xubkqt.com/

Google Analytics:
UA-2249740

Title:
“Ys4xubkqt.com”

Description:
“Find Cash Advance, Debt Consolidation and more at Ys4xubkqt.com. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Ys4xubkqt.com is the site for Cash Advance.”

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

30 of 685 related domains