supportversion.how2safeupdate.net

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain supportversion.how2safeupdate.net is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Lauderdale, Florida within the United States which resides on the Infolink Global Corporation network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Florida, United States (US)

Create date:
Friday, February 20, 2015

Expires date:
Saturday, February 20, 2016

Updated date:
Friday, April 1, 2016

ASN:
AS15083 INFOLINK-MIA-US - Infolink Global Corporation,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.Installer, PUP.installCore.OOOProfitAdverts.Installer (M), PUP.installCore.NEXTPOIN.Installer (M)
100.00%

VIPRE Antivirus
Threat.4150696
66.67%

Dr.Web
Trojan.InstallCore.508
66.67%

avast!
Malware-gen
66.67%

Bkav FE
W32.HfsAdware
66.67%

K7 AntiVirus
Adware
66.67%

Avira AntiVirus
PUA/InstallCore.IH
66.67%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application
66.67%

AVG
Generic
66.67%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
33.33%

The domain supportversion.how2safeupdate.net has been seen to resolve to the following 2 IP addresses.

May 19, 2016

mta8.helloresponse.com
May 21, 2015

File downloads found at URLs served by supportversion.how2safeupdate.net.

The following file have been seen to comunicate with supportversion.how2safeupdate.net in live environments.

30 of 35 related domains