install.holdingmypage.com
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain install.holdingmypage.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Massachusetts, United States (US)
Create date:
Thursday, March 20, 2014
Expires date:
Tuesday, March 20, 2018
Updated date:
Thursday, March 24, 2016
ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Yontoo.HoldPage (M), PUP.Yontoo.KnowledgeGains (M), PUP.Yontoo.HoldPage.Installer (M), PUP.Yontoo.middlepa.Installer (M), PUP.Yontoo.ForeverN.Installer (M)
87.50%
VIPRE Antivirus
Threat.4741131
12.50%
F-Secure
Adware.BrowseFox.AL
12.50%
Emsisoft Anti-Malware
Adware.BrowseFox.AL
12.50%
Lavasoft Ad-Aware
Adware.BrowseFox.AL
12.50%
ESET NOD32
MSIL/BrowseFox.G potentially unwanted application
12.50%
MicroWorld eScan
Adware.BrowseFox.AL
12.50%
nProtect
Adware.BrowseFox.AL
12.50%
Malwarebytes
PUP.Optional.HoldPage.A
12.50%
F-Prot
W32/S-9c5ae894
12.50%
Bitdefender
Adware.BrowseFox.AL
12.50%
Avira AntiVirus
ADWARE/BrowseFox.Gen4
12.50%
G Data
Adware.BrowseFox.AL
12.50%
Baidu Antivirus
Adware.MSIL.BrowseFox
12.50%
IKARUS anti.virus
PUA.MSIL.BrowseFox
12.50%
The domain install.holdingmypage.com has been seen to resolve to the following 7 IP addresses.
a23-15-7-136.deploy.static.akamaitechnologies.com
July 26, 2016
a23-15-7-161.deploy.static.akamaitechnologies.com
July 26, 2016
a104-96-220-131.deploy.static.akamaitechnologies.com
July 1, 2016
a104-96-220-160.deploy.static.akamaitechnologies.com
July 1, 2016
File downloads found at URLs served by install.holdingmypage.com.
The following 39 files have been seen to comunicate with install.holdingmypage.com in live environments.
URL:
http://install.holdingmypage.com/
SSL certificate subject:
CN=*.holdingmypage.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)15, OU=GT16269428
SSL certificate issuer:
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US
Web server:
Microsoft-IIS/7.5 (ASP.NET)
