home

dl.s25.uloz.to

Domain Information

Server location:
Hlavni Mesto Praha, Czech Republic (CZ)

ASN:
AS6830 LGI-UPC Liberty Global Operations B.V.

Root domain:
uloz.to

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

NANO AntiVirus
Trojan.Nsis.PWS.dqacos
100.00%

Dr.Web
Trojan.PWS.Panda.547
100.00%

Avira AntiVirus
TR/Drop.Agent.9785968
100.00%

McAfee
Artemis!86B5544AF1B0
100.00%

Fortinet FortiGate
Riskware/Sim
100.00%

The domain dl.s25.uloz.to has been seen to resolve to the following IP address.

93.99.92.193
September 10, 2015

File downloads found at URLs served by dl.s25.uloz.to.

5 / 68      (Malware)
http://dl.s25.uloz.to/Ps;Hs;fid=24447282;cid=2074279536;rid=1192325241;up=0;uip=95.103.77.239;tm=1349796260;ut=f;aff=uloz.to;cpid=40469;cpui=djxj;He;ch=e4f8ed07e75d0be30b56d45a303c96ae;cpnb=40469;cput=djxj;cptm=;Pe/.../metro8-skin-pack-3-0-x86.exe  (metro8_skin_pack_3.0-x86.exe)

The following 4 files have been seen to comunicate with dl.s25.uloz.to in live environments.

TCP » 93.99.92.193:443
online-guardian-v2.0.9.exe

TCP » 93.99.92.193:443
seznam.cz.exe

TCP » 93.99.92.193:443
onlineguardian-v2.exe

TCP » 93.99.92.193:443
online-guardian-v2.exe

pornfile.cz

ulozto.cz

ulozto.net

ulozto.sk

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.