185.59.220.32

[PeterExact]

Hello! I am posting because one of our clients got an email from a customer saying MBAM gives an alert when visiting their site.

 

Here's the copy+paste from the log:

 

Detection, 19.10.2015 11:26, SYSTEM, PTS23, Protection, Malicious Website
Protection, IP, 185.59.220.32, cdn.exactag.com, 54797, Outbound,
C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 19.10.2015
11:26, SYSTEM, PTS23, Protection, Malicious Website Protection, IP,
185.59.220.32, cdn.exactag.com, 54797, Outbound, C:\Program Files
(x86)\Mozilla Firefox\firefox.exe, Detection, 19.10.2015 11:26, SYSTEM,
PTS23, Protection, Malicious Website Protection, IP, 185.59.220.32,
cdn.exactag.com, 54801, Outbound, C:\Program Files (x86)\Mozilla
Firefox\firefox.exe, Detection, 19.10.2015 11:26, SYSTEM, PTS23,
Protection, Malicious Website Protection, IP, 185.59.220.32,
cdn.exactag.com, 54807, Outbound, C:\Program Files (x86)\Mozilla
Firefox\firefox.exe, Detection, 19.10.2015 11:26, SYSTEM, PTS23,
Protection, Malicious Website Protection, IP, 185.59.220.32,
cdn.exactag.com, 54808, Outbound, C:\Program Files (x86)\Mozilla
Firefox\firefox.exe,

 

Screenshot from the alert attached.

 

Could you please check and remove? Thank You!

[Zynthesist]

We are blocking this IP for adware and its further association with malicious activity, as you can see here:

 

https://www.virustotal.com/en/ip-address/185.59.220.32/information/

 

And here:

 

 

https://www.virustotal.com/en/file/5c28d3005a2de402e3f42cff6aca9037caaf82f93da43b5933cd4663a6fdb091/analysis/