home

nowupgrade24.safeupgrades4ever.website

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
safeupgrades4ever.website

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.OOOKodIn.Installer (M)
100.00%

The domain nowupgrade24.safeupgrades4ever.website has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
May 27, 2016

File downloads found at URLs served by nowupgrade24.safeupgrades4ever.website.

1 / 68      (PUP)
http://nowupgrade24.safeupgrades4ever.website/dl.php?ctrwqtv=DnpSQdqzYfx_s_FrbE3AwGPmsTozys2PoBW_Y66P_HI.&cid=5B9LYl0mFe2mLMyjZ5FacCFqoKYmf1xrmoUuX1M73A9uHHQtKDwYekXHJHMv1j_40Q52t81iR_UoZRZ5KttL5LcRIMKlYsU1FsPmWl_CFERsZNCp7JrwtM8qJCI9P3xHZdlV7MTEa84Gua-Y5Y3Zzh6fQIUsxtbsZOwvRfWPg0YIDXZDURrItb-ndNB-QPfAMmy4vA9Kg23UtzrvdUjExSM7zl11TwNUd6xzfSPYgYEZIyPGPL7AqGzV1sgxFZ5tGDnFC3eOjO5IeqN0eNosImRG302-qHRgwS0GNKoAei4BL6v-jgXWr-XMaruI8DmG5gxq99BulL52RD34uz8seGHLoBb8VszfCTvEnRTs5JbmExZwwKNL14k9KstEEcQGwm-k4pSrqiqKQtO525szg4QIOCKkeolQhqmNhAkrHLayS1PfV-7OVF-_-rLKhtdWgOu8GgEPyzZH4IC1815KibgPiabGirjj_kC2ilMXfw&sid=[SUB_ID]&conversion_id=14625387031328&app_id=129&lp_id=1610&v=tribat&stub_id=305&v_id=KFWEflchpum_g4UO60aJcjUlTet3wZhEXoSxqbdLdko.&lpp=w10*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://nowupgrade24.safeupgrades4ever.website/dl.php?ctrwqtv=E8AeT_i_eNx1fVDaFVIiw5vdn2LPPK_lhvVy7iBWfEw.&cid=MzAwNyMxMjEwMiM5NzIjMjA2Njd8MjgyMzU5fEJSfDN8MXx8fHw&conversion_id=14625383315788&app_id=129&lp_id=1561&v=tribat&stub_id=305&v_id=F15gCaQ96cj43VpfmdORtl-kYxAFrtRkiK1SQ2J4_-M.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://nowupgrade24.safeupgrades4ever.website/dl.php?ctrwqtv=DnpSQdqzYfx_s_FrbE3AwGPmsTozys2PoBW_Y66P_HI.&cid=CtVVvS4jOuXA9RyZ460TdRqt0hVxVqgImv1_azkB-_79Carzf650wFoyxdJTLfqiOVau0YitxgIbmGHjW3CkcSH_BTpu6atjlZ_SvR7GNrGaxr22tlR_kbfc0Ta-tC89NFIrIolDdUpeJpB97KeSsmLrky-0_w77gc85S-Hz6UCNyaIOQOTBvoSTwpdbi6KkDQXfzAt_R1COKm4mtftLQTBzemHuSkOd814xuXdw5H-Bv7NmC06FVwNVQz9qjbJOvm78VuN3VuS2VdKuCAVDaNSJfZk665C02tDUP9eybJh0Izt0p_pyhNnDONJTb-Wl-gi870seqnJYA9dlcaOJrYLpKu_Bxuf_ojp2HpCYy7dEuBa59SY-dK0r9u5t27blp5A4Jd2VuZFA_G56MhuHXokHv6cBjdqze_oVShbJUNR6m9QbQtNFw8A2JwlsWznqObyPcveCuTalbtFOD0c8VKKIocSYR7XuinN0CrPHqDIz_YMRDb0&sid=[SUB_ID]&conversion_id=14625441080720&app_id=129&lp_id=1602&v=icoin&stub_id=293&v_id=zU960owBlwhnOWJ_S_QkflUxixBEsaKZYr5_UwB_NoQ.&lpp=w10*-*-*  (adobe_flashplayer.exe)

1 / 68      (PUP)
http://nowupgrade24.safeupgrades4ever.website/dl.php?ctrwqtv=qU3Z7XUlfImHuT1FQ4EPPqG1uIwy8JoStrTO-HH4cqA.&cid=1462538378mb44259415063&conversion_id=14625383810075&app_id=4&lp_id=1590&v=icoin&stub_id=293&v_id=UeG2r8dtAXgr3jFVH7ewQO2NQIrlbDB_b_bCg3ORQeo.&lpp=*-*-*  (adobe_flashplayer.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.