home

install-cdn.followrulessoftware.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain install-cdn.followrulessoftware.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
GODADDY.COM, LLC

Create date:
Tuesday, December 16, 2014

Expires date:
Friday, December 16, 2016

Updated date:
Monday, April 27, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
followrulessoftware.com

Whois:
1 followrulessoftware.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BHO.Yontoo, PUP.Yontoo, PUP.Yontoo.FollowRules (M)
100.00%

Malwarebytes
PUP.Optional.JumpFlip.A, PUP.Optional.FollowRules.A
100.00%

K7 AntiVirus
Trojan , Unwanted-Program
100.00%

NANO AntiVirus
Trojan.Win32.BPlug.dfogbn, Trojan.Win32.Yontoo.dnkubo
100.00%

Dr.Web
Trojan.BPlug.215, Trojan.Yontoo.1016, Trojan.Yontoo.1734
100.00%

Avira AntiVirus
ADWARE/BrowseFox.Gen2
100.00%

AVG
BrowseFox.F, Generic, AdPlugin
100.00%

Baidu Antivirus
Adware.Win32.BrowseFox
100.00%

Clam AntiVirus
Win.Adware.Browsefox-172, Win.Adware.Browsefox-411
100.00%

Bkav FE
W32.HfsAdware, W32.BrowseFoxAC.Adware
100.00%

IKARUS anti.virus
AdWare.BrowseFox, PUA.BrowseFox
100.00%

F-Prot
W32/S-7bed2e86, W32/S-9c4b2ea6, W32/S-f64f6ec1
94.12%

Vba32 AntiVirus
AdWare.Kranet, AdWare.MSIL.Agent
94.12%

VIPRE Antivirus
Yontoo, Trojan.Win32.Generic
88.24%

Trend Micro House Call
TROJ_GEN.F0C2C00LH14, Suspicious_GEN.F47V0207, Suspicious_GEN.F47V0214, Suspicious_GEN.F47V0220, Suspicious_GEN.F47V0221
88.24%

The domain install-cdn.followrulessoftware.com has been seen to resolve to the following 37 IP addresses.

65.158.47.56
July 20, 2016

72.247.8.185
a72-247-8-185.deploy.akamaitechnologies.com
July 4, 2016

72.247.8.178
a72-247-8-178.deploy.akamaitechnologies.com
July 4, 2016

104.96.220.176
a104-96-220-176.deploy.static.akamaitechnologies.com
May 17, 2016

104.96.220.155
a104-96-220-155.deploy.static.akamaitechnologies.com
May 17, 2016

104.96.220.131
a104-96-220-131.deploy.static.akamaitechnologies.com
May 17, 2016

184.51.126.128
a184-51-126-128.deploy.static.akamaitechnologies.com
April 19, 2016

184.51.126.168
a184-51-126-168.deploy.static.akamaitechnologies.com
April 19, 2016

184.51.126.155
a184-51-126-155.deploy.static.akamaitechnologies.com
April 19, 2016

184.51.126.144
a184-51-126-144.deploy.static.akamaitechnologies.com
April 19, 2016

23.15.8.203
a23-15-8-203.deploy.static.akamaitechnologies.com
April 18, 2016

23.15.8.216
a23-15-8-216.deploy.static.akamaitechnologies.com
April 18, 2016

184.51.126.105
a184-51-126-105.deploy.static.akamaitechnologies.com
April 18, 2016

65.158.47.82
April 13, 2016

65.158.47.81
April 13, 2016

184.51.126.129
a184-51-126-129.deploy.static.akamaitechnologies.com
April 7, 2016

23.15.8.225
a23-15-8-225.deploy.static.akamaitechnologies.com
April 6, 2016

23.15.8.227
a23-15-8-227.deploy.static.akamaitechnologies.com
April 6, 2016

184.51.126.192
a184-51-126-192.deploy.static.akamaitechnologies.com
April 5, 2016

184.51.126.178
a184-51-126-178.deploy.static.akamaitechnologies.com
April 5, 2016

184.51.126.137
a184-51-126-137.deploy.static.akamaitechnologies.com
April 5, 2016

184.51.126.131
a184-51-126-131.deploy.static.akamaitechnologies.com
April 5, 2016

184.51.126.130
a184-51-126-130.deploy.static.akamaitechnologies.com
April 5, 2016

23.62.6.115
a23-62-6-115.deploy.static.akamaitechnologies.com
March 3, 2016

23.62.6.104
a23-62-6-104.deploy.static.akamaitechnologies.com
March 3, 2016

184.51.126.154
a184-51-126-154.deploy.static.akamaitechnologies.com
February 29, 2016

184.51.126.147
a184-51-126-147.deploy.static.akamaitechnologies.com
February 29, 2016

184.51.126.138
a184-51-126-138.deploy.static.akamaitechnologies.com
February 29, 2016

184.51.126.136
a184-51-126-136.deploy.static.akamaitechnologies.com
February 29, 2016

184.51.126.194
a184-51-126-194.deploy.static.akamaitechnologies.com
February 29, 2016

 
Showing 30 of 37 IP Addresses

File downloads found at URLs served by install-cdn.followrulessoftware.com.

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020213&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020612&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021319&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021719&bet=3  (followrulesbho.dll)

16 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022403&bet=3  (followrules.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021113&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020319&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020516&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022106&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021123&bet=3  (followrulesbho.dll)

40 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022303&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022212&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022207&bet=3  (followrulesbho.dll)

19 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021612&bet=3  (followrules.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020814&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021917&bet=3  (followrulesbho.dll)

40 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022318&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020304&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022000&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021623&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021714&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015022015&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021709&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020713&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020607&bet=3  (followrulesbho.dll)

12 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021516&bet=3  (followrules.dll)

19 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015021617&bet=3  (followrules.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020511&bet=3  (followrulesbho.dll)

38 / 68    (Adware)
http://install-cdn.followrulessoftware.com/bed?r=2015020804&bet=3  (followrulesbho.dll)

The following 461 files have been seen to comunicate with install-cdn.followrulessoftware.com in live environments.

TCP » 104.96.220.155:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.99:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.176:80
utildealkeeper.exe

TCP » 104.96.220.131:80
plugin.exe

TCP » 184.51.126.99:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.194:80
utildealkeeper.exe

TCP » 184.51.126.105:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.88:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.99:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.176:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.105:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.105:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 184.51.126.98:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.131:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.105:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.98:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.154:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.131:443
whatsapptime.exe

 
Latest 20 of 530 files

URL:
http://install-cdn.followrulessoftware.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.