home

check.preparednewupdates.site

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
preparednewupdates.site

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.OOOKodIn.Installer (M), PUP.DigitalZ.Installer (M)
100.00%

The domain check.preparednewupdates.site has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
May 28, 2016

File downloads found at URLs served by check.preparednewupdates.site.

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=Ygb2FQGlE4Sa2HXMWOgt97zxSeJcUP2hHU2BQsCNNcU.&cid=us53dm7q6mldrcddqeap&subid=3798&conversion_id=14627591081973&app_id=4&lp_id=1590&v=tribat&stub_id=305&v_id=e5jkdObBEx3fU5shLaUw2MIYOia4WJJi2YF6Y6PMEYg.&lpp=w10*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=_Va78cAhdKUbkAZyfdq3Fi0pW-7WD3DQnzhWcty3-dw.&cid=us4beed94ctj34j6n3f4&subid=2279&conversion_id=14627527033639&app_id=4&lp_id=1518&v=icoin&stub_id=293&v_id=EwW1etP5t4wZQM_541SciAwCtlvuCBSys0xlpAnakOc.&lpp=w10*-*-*  (adobe_flashplayer.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=44qzaB45lQGnw9sT1vTWQ1UsYo5-Lqz2FRZIQMEZkuk.&cid=eu4njrf2rdbwmdyfa8k8&subid=2279&conversion_id=14627841900976&app_id=129&lp_id=1401&v=tribat&stub_id=305&v_id=UvftNyz_FkFpYZPPuTTry5np9QAV0gevzK1DrKG7TkE.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=_Va78cAhdKUbkAZyfdq3Fi0pW-7WD3DQnzhWcty3-dw.&cid=us4le4anhvdbngwae9ee&subid=2279&conversion_id=14627486108115&app_id=4&lp_id=1379&v=tribat&stub_id=305&v_id=Rq-UGJjttd5LFuSScks4B6YsXbqcQTtfaVhVzpoq4sU.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=S_jTzbaCeqY-7A67ZDBHFSrO_sjyRBx58EOys_NsZ9I.&cid=CkZnpJ35oem9MEIa_NZYp9ipjIQ5a5f8Dy-KtcRFCWhrgtcRIReIq_SK6Br4YD4fvNwEoZhZbZzLPJprb5Ms8SP8wVdof9TZLpZ7rVgHdLpP-qRglpA4Nm&qs1=&conversion_id=14627511717865&app_id=4&lp_id=1509&v=tribat&stub_id=305&v_id=pGYekBcF4g9x99cPBP1zuacygKym3By1glw4XcBneoE.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=Ygb2FQGlE4Sa2HXMWOgt97zxSeJcUP2hHU2BQsCNNcU.&cid=us5mv8ddegdmkgeel1cw&subid=3829&conversion_id=14627562241963&app_id=4&lp_id=1590&v=tribat&stub_id=305&v_id=wdljvJ_l52_uPgfKcGwa_g8ykKcg9ybJ27bTc7gY0yU.&lpp=w10*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=NCDF8u0WEbGG-U9QxWeNOwcEx_mBd6Fw5z6oPgN5AXA.&s2=1825698022.456692.d8cc85c6cc.2005.92fed9a802f5898d5d3649ec1b563737&conversion_id=14627733338695&app_id=4&lp_id=1221&v=tribat&stub_id=305&v_id=tEWX8rRiUosYg4Gpa-TusbJvGWmLpBNsm531oKB0Gws.&lpp=w10*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://check.preparednewupdates.site/dl.php?fhtgyr=85V709wXfch-wX2Ja4qrLKzEV1ZFYlS2V8ZCzVO7CPw.&sub=243024&cid=5116155993&conversion_id=14627520954721&app_id=4&lp_id=1567&v=tribat&stub_id=305&v_id=nw_uj6MMmAewdGKMp-C6q2KXdwgWyBktNin9ztTP_8w.&lpp=w10*-*-*  (flash_player_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.