rhtag.com

INTANGO

Domain Information

The domain rhtag.com registered by INTANGO was initially registered in April of 2013 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Thursday, April 18, 2013

Expires date:
Monday, April 18, 2016

Updated date:
Thursday, March 19, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AstroDeliveryFriedCookie.e, PUP.FreeSoftware.e, PUP.ClickYes.e, PUP.Tightrope.Bundler, PUP.Installer.InstallCore.Installer, PUP.InstallCore.Installer.Installer (M), PUP.Outbrowse.CLICKTOSTART.Bundler (M), PUP.Softpulse.PluginUp.Bundler (M), PUP.Outbrowse.BESTAPP.Bundler (M), PUP.InstallCore.FC.Installer (M), PUP.Outbrowse.MAXTEK.Bundler (M), PUP.OutBrowse.StartPla.Installer (M), PUP.Outbrowse.MARiMara.Bundler (M), PUP.DownloadAdmin.CodeTech.Installer (M), PUP.ProfitServis.VUDGOFF.Bundler (M), PUP.Outbrowse.StartNow.Bundler (M), PUP.Outbrowse.BestApp.Bundler (M), PUP.Outbrowse.ClickYes.Bundler (M), PUP.Outbrowse.OtopiaSo.Bundler (M), PUP.Outbrowse (M), PUP.InstallCore.FC (M), PUP.DownloadAdmin (M), PUP.OutBrowse (M), PUP.Air Software.Installe.Installer (M)
100.00%

VIPRE Antivirus
InstallCore, Vittalia Installer, Threat.4784459, DownloadAdmin, Threat.4782551, Threat.4786018, Threat.4150696
14.00%

AVG
Generic, Downloader
14.00%

Dr.Web
Trojan.InstallCore.15, Trojan.OutBrowse.6, Adware.Downware.2220, Trojan.DownLoad3.35287
12.00%

Sophos
Generic PUA OL, PUA 'OutBrowse Revenyou', Generic PUA DF, PUA 'Install Core Click run software'
10.00%

Avira AntiVirus
ADWARE/InstallCore.Gen7, ADWARE/Adware.Gen, PUA/InstallCore.Gen7
10.00%

McAfee
Artemis!152897CDF91D, Program.Adware-OutBrowse.c, Artemis!1E6F5E1681D2, Artemis!9BA457EE6E51
8.00%

ESET NOD32
Win32/InstallCore.RG (variant), Win32/InstallCore.SC (variant), Win32/DownloadAdmin (variant), Win32/InstallCore.UE potentially unwanted (variant)
8.00%

Baidu Antivirus
Adware.Win32.InstallCore, PUA.Win32.OutBrowse
8.00%

Malwarebytes
PUP.Optional.BundleInstaller, PUP.Optional.OutBrowse, PUP.Optional.DownloadAdmin
8.00%

K7 AntiVirus
Unwanted-Program
8.00%

NANO AntiVirus
Trojan.Win32.OutBrowse.djogzg, Riskware.Win32.Downware.djahkt, Riskware.Win32.InstallCore.dnazrt
8.00%

IKARUS anti.virus
PUA.OutBrowse, Trojan.Dropper, not-a-virus:Downloader.FrieCook
8.00%

Trend Micro House Call
Suspicious_GEN.F47V1118, Suspicious_GEN.F47V1204, Suspici.7B6A9C43
6.00%

Fortinet FortiGate
Riskware/InstallCore, Riskware/OutBrowse, Riskware/FrieCook
6.00%

The domain rhtag.com has been seen to resolve to the following 2 IP addresses.

108.168.157.83-static.reverse.softlayer.com
May 3, 2015

108.168.157.121-static.reverse.softlayer.com
November 29, 2014

File downloads found at URLs served by rhtag.com.

 
Latest 30 of 125 download URLs

The following 44 files have been seen to comunicate with rhtag.com in live environments.

 
Latest 20 of 69 files

URL:
http://rhtag.com/

Title:
“Contact Us”

Web server:
nginx

Facebook:
Shares:  8

Statistics above are for the previous month of October 2024.