home

ocnuq.yt-downloader.org

MyPrivacy.net

Domain Information

The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
easyDNS Technologies Inc.

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH , FR

Root domain:
yt-downloader.org

Whois:
1 yt-downloader.org record

The domain ocnuq.yt-downloader.org has been seen to resolve to the following IP address.

51.254.197.108
ns3042684.ip-51-254-197.eu
September 1, 2016

File downloads found at URLs served by ocnuq.yt-downloader.org.

0 / 68
http://ocnuq.yt-downloader.org/download.php?id=9bfbf9cfdeb22fd486041bd48a962e01  (eb3fccde-0cad-8f00-d084-c078f59d1746_1d1e9a82f5a3b17)

0 / 68
http://ocnuq.yt-downloader.org/download.php?id=fb002b671fd350d4a41d39894f9a4696  (2cb74c77-f132-23c7-80c9-fb392402d501_1d1e82f395f30b4)

The following 4 files have been seen to comunicate with ocnuq.yt-downloader.org in live environments.

TCP » 51.254.197.108:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 51.254.197.108:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 51.254.197.108:80
8dda4b771a8b9ff7908171c045da8d64.exe

TCP » 51.254.197.108:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

URL:
http://ocnuq.yt-downloader.org/

Web server:
nginx/1.11.2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.