home

files4.ubergame.org

Domain Name Acquisitions A, LLC

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Rackspace Hosting network.
Registrar:
GoDaddy.com, LLC (R91-LROR)

Server location:
Texas, United States (US)

ASN:
AS33070 RMH-14 - Rackspace Hosting,US

Root domain:
ubergame.org

Whois:
2 ubergame.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DownloadAdmin.AA, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.Tightrope.Download.Bundler (M)
100.00%

Dr.Web
Adware.Downware.80, Adware.Downware.238
28.57%

ESET NOD32
Win32/DownloadAdmin.A.Gen
28.57%

Sophos
Download Admin
28.57%

herdProtect (fuzzy)
a variant of 33b38f61347e21e3a2f1abf1d38f121249664e70, a variant of 4948bbd3b4d29391e055aa42baf0cb40124f06f9
28.57%

VIPRE Antivirus
DownloadAdmin
14.29%

SUPERAntiSpyware
Trojan.Agent/Gen-DownloadAdmin
14.29%

Avira AntiVirus
Adware/DownloadAd.CK
14.29%

Bkav FE
HW32.CDB
14.29%

McAfee
Artemis!34E93A24B6C5
14.29%

Trend Micro House Call
TROJ_GEN.R4FOHHN
14.29%

Clam AntiVirus
PUA.Win32.Packer.DupPatcher
14.29%

The domain files4.ubergame.org has been seen to resolve to the following IP address.

50.56.218.189
50-56-218-189.static.cloud-ips.com
August 11, 2015

File downloads found at URLs served by files4.ubergame.org.

1 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=gamesviewcountryUS&bc=3691&country=US&cb=228617966  (plantsvszombies-setup.exe)

1 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=gamesview&bc=1180&country=US&cb=239552435  (myboyfriend-setup.exe)

1 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=gamesviewcountryUS&bc=3691&country=US&cb=-492945595  (plantsvszombies-setup.exe)

1 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=gamesview&bc=4342&country=US&cb=1035482017  (kindergarten-setup.exe)

1 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=gamesview&bc=1417&country=US&cb=-720594681  ({blocked}.exe)

1 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=gamesview&bc=4282&country=US&cb=-1525459779  (huntingunlimited4-setup.exe)

6 / 68      (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&aid=categoryview&bc=2902&country=US&cb=1668657853  (littleshopoftreasures-setup.exe)

11 / 68    (Adware)
http://files4.ubergame.org/download?s=Bullet_Media&c=ubergame.net_multi&brand=ubergames.net&pid=BULLETMEDIA&bc=4564&country=US&cb=-1987417569  (huntingunlimited2010-setup.exe)

The following 58 files have been seen to comunicate with files4.ubergame.org in live environments.

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

TCP » 50.56.218.189:443
translategenius.crx

 
Latest 20 of 58 files

URL:
http://files4.ubergame.org/

Google Analytics:
UA-64879967

Web server:
nginx/1.0.15

computerspeedoptimizer.com

instant-dl.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.