Sign in
Follow

ET MALWARE Fun Web Products Spyware User-Agent (FunWebProducts)

 

 IP AddressPortHostname
Source (local) 61143  
Destination 172.229.211.27 (United States) http (80)

 

Description:

See the following:

 

False Positive:

  • PROBABLY NOT
  • FunWebProducts is a real company peddling junkware/spyware.  However, see the sucuri blog post and some of the comments.
  • There is possible something else is going on here, particularly in light of the other User-Agents showing up on that system.
  • The involved IP is from a CDN (Akamai), so nothing conclusive there.
  • The target domain for this request is www.cars.com.

 

Action:

  • Alarm
  • Scan asset to ensure it is not infected with a Browser Hijacker

Comments

Powered by Zendesk