home

dfh.fve.nexttagupdate.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
nexttagupdate.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.AVSoftwa.Installer (M)
100.00%

The domain dfh.fve.nexttagupdate.com has been seen to resolve to the following 2 IP addresses.

54.69.101.23
ec2-54-69-101-23.us-west-2.compute.amazonaws.com
July 30, 2016

52.33.212.204
ec2-52-33-212-204.us-west-2.compute.amazonaws.com
July 30, 2016

File downloads found at URLs served by dfh.fve.nexttagupdate.com.

1 / 68      (PUP)
http://dfh.fve.nexttagupdate.com/handle?fl=http://.../get.php?file=97c4bfbc&m3&fs=3.81 MB&d=Psiphon91LiteOdiseoHandler & Modder Ernest sign.apk  (psiphon91liteodiseoh.exe)

The following file have been seen to comunicate with dfh.fve.nexttagupdate.com in live environments.

TCP » 54.69.101.23:443
UCBrowser.exe (UC Browser by UCWeb)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.