home

client.downloader.levelupgames.com.br

Andrea Finardi Lan�oni

Domain Information

The hosted servers are located in Sao Paulo, Sao Paulo within Brazil which resides on the Latin American and Caribbean IP address Regional Registry network.
Server location:
Sao Paulo, Brazil (BR)

ASN:
AS28588 LEVEL UP! INTERACTIVE S/A,BR

Root domain:
levelupgames.com.br

Whois:
2 levelupgames.com.br records

The domain client.downloader.levelupgames.com.br has been seen to resolve to the following 2 IP addresses.

187.72.154.97
187-072-154-097.static.ctbctelecom.com.br
November 13, 2015

200.229.49.8
topup2.levelupgames.com.br
February 3, 2014

File downloads found at URLs served by client.downloader.levelupgames.com.br.

0 / 68
http://client.downloader.levelupgames.com.br/lineofsight.exe  (3530bf77fdd2835549151e1d4a0250c9)

0 / 68
http://client.downloader.levelupgames.com.br/elsword.exe  (21aa423005aa7712ab920e10c322428f)

0 / 68
http://client.downloader.levelupgames.com.br/smite.exe  (1a38ddb2e894410027d7b9ec0e4c4665)

1 / 68      (Adware)
http://client.downloader.levelupgames.com.br/setup.exe  (8552efdc98173b6215da08ed77f93b5d)

0 / 68
http://client.downloader.levelupgames.com.br/forsaken.exe  (a0643e01507e4e28e1e2dd79561a6166)

0 / 68
http://client.downloader.levelupgames.com.br/ragnarok.exe  (86490c4eff3d69e259a59b737b062258)

0 / 68
http://client.downloader.levelupgames.com.br/perfectworld.exe  (0140aa1fdcabbcd5711732e76e05e3af)

0 / 68
http://client.downloader.levelupgames.com.br/warface.exe  (3cd68983857e055bf142dd0311b7b68e)

0 / 68
http://client.downloader.levelupgames.com.br/combatarms.exe  (3d491fde760a4685a9ae119eae3c0d6e)

0 / 68
http://client.downloader.levelupgames.com.br/suddenattack.exe  (6e291d9790d8bbe84e02c9086e9a260d)

The following 3 files have been seen to comunicate with client.downloader.levelupgames.com.br in live environments.

TCP » 187.72.154.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 187.72.154.97:80
setup.exe

TCP » 187.72.154.97:443
browser.exe (Speed Browser by Long Mile Solutions)

URL:
http://client.downloader.levelupgames.com.br/

Web server:
nginx/1.4.6 (Ubuntu) (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.