» premiumsave.info
Overview
Analysis
IPs Addresses (5)
Downloads (28)
Network (7)
Subdomains (1)
Related Domains (28)

premiumsave.info

Premium Soft

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Premium Soft

Registrar:

GoDaddy.com, LLC

Server location:

Arizona, United States (US)

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Whois:

2 premiumsave.info records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Optional.SmartPCSolutions.M, Threat.Win.Reputation.IMP, PUP.Installer.ArtuaVladislav.H, PUP.Installer.WebPick, PUP.WebPick.RoadpassTrading.Installer (M), PUP.WebPick.ArtuaVladislav.Installer (M), PUP.WebPick.ArtuaVla.Installer (M), PUP.WebPick (M)

100.00%

Malwarebytes

PUP.Optional.OptimizePro.A, PUP.Optional.Installrex, PUP.Optional.InstallRex

25.00%

NANO AntiVirus

Riskware.Win32.Unwanted.bkizdi, Riskware.Win32.Downware.ctkpgl, Riskware.Win32.Downware.cvbqxs, Riskware.Win32.Downware.ctkpkm

25.00%

Comodo Security

Heur.Suspicious, Application.Win32.InstalleRex.KG, Application.Win32.Bundledz.C

25.00%

AhnLab V3 Security

PUP/Win32.OptimizerPro, PUP/Win32.TSULoader

21.88%

avast!

Win32:InstalleRex-AI [PUP], Win32:InstallMate-CJ [PUP], Win32:InstallMate-AI [PUP], Win32:InstallMate-CS [PUP]

21.88%

Agnitum Outpost

PUA.InstalleRex, Trojan.Rogue, Riskware.InstallMate

21.88%

Dr.Web

Adware.Downware.771, hacktool program Tool.InstallToolbar.71, Adware.Downware.97

21.88%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4150696, Installerex/WebPick

21.88%

Avira AntiVirus

Adware/InstallRex.X, TR/Rogue.8930382, Adware/Bundledz.C

21.88%

Sophos

InstallRex, PUA 'InstallRex'

21.88%

Vba32 AntiVirus

Downloader.AdLoad

21.88%

ESET NOD32

Win32/InstalleRex.E potentially unwanted application, Win32/InstallMate potentially unwanted application, Win32/InstallMate.A potentially unwanted application

21.88%

Rising Antivirus

PE:PUF.InstallRex!1.9E4C, PE:Adware.Agent!6.AFE, PE:Malware.Bundledz!6.11CB

21.88%

AVG

MalSign.Generic, Adware AdInstaller.PremiumInstaller

21.88%

The domain premiumsave.info has been seen to resolve to the following 5 IP addresses.

50.63.202.39

ip-50-63-202-39.ip.secureserver.net

September 1, 2016

August 17, 2014

August 17, 2014

June 26, 2014

June 26, 2014

File downloads found at URLs served by premiumsave.info.

1 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../loja4jj1odk9 (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../s2cgekj15gn9 (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/v51/?product_name=Animated Gifs download&product_title=Animated Gifs download&installer_file_name=Animated Gifs - Cute Teddy Bears&product_file_name=Cute Teddy Bears.gif&product_download_url=http://images.gifmania.gr/Animated-Gifs-Love/Animations-Romantic-Teddy-Bears/cute-teddy-bears2.gif&product_image_url=http://.../instalador_gifmania.bmp&product_image_file_name=Cute Teddy Bears (animated gifs - cute teddy bears.exe)

1 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../abzjj50r9f42 (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../caqzq8fi9pvh (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../w0pm2mcpas5u (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../uzhtqjwhhdgy (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../pe5coat663nn (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../394k146j50cn (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../zptt5stcnbzw (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../kq8h1nl4hl0h (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v81/?reffer=http://vidreel.com/video/.../ (codec-v.exe)

7 / 68 (PUP)

http://premiumsave.info/installmate/.../optimizerpro.exe (078e023f550920ac3fbdd6c33de4c30b)

1 / 68 (Adware)

http://premiumsave.info/v85/?reffer=http://series.ly/.../peli-TKKE3UR2C4 (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v85/?reffer=http://www.seriescoco.com/s/ngo/2/5/9/.../402 (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v85/?reffer=http://www.seriescoco.com/s/ngo/2/5/9/.../025 (codec-c.exe)

1 / 68 (Adware)

http://premiumsave.info/v85/?reffer=http://www.seriescoco.com/s/ngo/.../6/0/.../123 (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../uw6y6n29r0th (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/.../ (fastdownload.exe)

1 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../k4rh19370dvk (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/v85/?reffer=http://house.seriespepito.com/capitulos-octava-temporada-8/.../ (codec-c.exe)

34 / 68 (Adware)

http://premiumsave.info/.../ (fastdownload.exe)

34 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../1zcuvix5yv3i (codec-v.exe)

1 / 68 (Adware)

http://premiumsave.info/.../ (addictthing.exe)

31 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../xpvvjav3l1qr (codec-v.exe)

32 / 68 (Adware)

http://premiumsave.info/v77/?reffer=http://.../hbsqypop7i2a (codec-v.exe)

24 / 68 (Adware)

http://premiumsave.info/v15/?reffer=http://.../wyrrnxph8cd6 (codec-c.exe)

35 / 68 (PUP)

http://premiumsave.info/.../ (wxdownload.exe)

The following 7 files have been seen to comunicate with premiumsave.info in live environments.

TCP » 50.63.202.39:80

vcheck.exe (WebGrabber Application)

TCP » 50.63.202.39:80

bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 50.63.202.39:80

online-guardian-v2.0.9.exe

TCP » 50.63.202.39:25

www.exe

TCP » 50.63.202.39:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 50.63.202.39:80

online-guardian-v2.0.9.exe

TCP » 50.63.202.39:587

w.exe

Subdomains

February 22, 2016

Related Domains

downohqimjjedf0jq.com

files-fast.net

freemediavideoconverter.com

hs3dmr.com

inspirationagile.info

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.