home

how2update.ugrade4ever.online

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
ugrade4ever.online

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.OOOKodIn.Installer (M)
100.00%

The domain how2update.ugrade4ever.online has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
May 28, 2016

File downloads found at URLs served by how2update.ugrade4ever.online.

1 / 68      (PUP)
http://how2update.ugrade4ever.online/dl.php?crvter=Ng4WtNxhGPEQZdqC1dWAshWscO8dCXLx14dzm1z-R-E.&cid=174008497171&sid=332522&conversion_id=14626903702189&app_id=4&lp_id=1609&v=tribat&stub_id=305&v_id=gynXD_czqvn2_ETBMEz9zEsr8l1b3MjLVrRojGnNVbw.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://how2update.ugrade4ever.online/dl.php?crvter=Ng4WtNxhGPEQZdqC1dWAshWscO8dCXLx14dzm1z-R-E.&cid=175131402884&sid=10802&conversion_id=14627317849986&app_id=4&lp_id=1609&v=tribat&stub_id=305&v_id=QdKPumFdxpmYyuiNvV3PYYi7IeB4FOZrkf_LY198k_g.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://how2update.ugrade4ever.online/dl.php?crvter=Ng4WtNxhGPEQZdqC1dWAshWscO8dCXLx14dzm1z-R-E.&cid=188494027303&sid=301226&conversion_id=14626908993048&app_id=129&lp_id=1609&v=tribat&stub_id=305&v_id=M6YDBvrxaZby8cQ76jslxWQCwHsstucJ_01nBMqw-9o.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://how2update.ugrade4ever.online/dl.php?crvter=Ng4WtNxhGPEQZdqC1dWAshWscO8dCXLx14dzm1z-R-E.&cid=175085026924&sid=38411&conversion_id=14627252217721&app_id=4&lp_id=1609&v=tribat&stub_id=305&v_id=yV5byqTNYX7JsQmvxmTVCzXdE1ccIOJ1tnLFkS_1DSM.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://how2update.ugrade4ever.online/dl.php?crvter=Ng4WtNxhGPEQZdqC1dWAshWscO8dCXLx14dzm1z-R-E.&cid=175128951134&sid=289041&conversion_id=14627314358993&app_id=4&lp_id=1609&v=tribat&stub_id=305&v_id=mUzQm3VYs2_zKv5PWWH6bv0olFMW51zBkCRkCD2go-c.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://how2update.ugrade4ever.online/dl.php?crvter=EfQXN4ORWcK92vplRojjDhq9r9s4D2Mdj0nUGl7ECGE.&cid=188510033363&sid=296416&conversion_id=14626942717723&app_id=4&lp_id=1542&v=tribat&stub_id=305&v_id=VhST14o1sE5ufYchX16ulaWZNO_iIRpONk4_L43WfY8.&lpp=*-*-*  (flash_player_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.