home

update.safe2download.tech

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
safe2download.tech

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.OOOKodIn.Installer (M)
100.00%

The domain update.safe2download.tech has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
May 25, 2016

File downloads found at URLs served by update.safe2download.tech.

1 / 68      (PUP)
http://update.safe2download.tech/dl.php?askjf=10QydW4wk10InnO0nVjw-Gm4HrFaEMU2YL_WW3YFynE.&cid=MTA1MHw1MjA3fFVTfDN8MXx8Y3pKeipTazFETVRJMU9WOUVkbTh3VkZocE5tbGxMVkJqVmxKQ1YzVTBVR0kyfHw&conversion_id=14623240221953&app_id=129&lp_id=1550&v=tribat&stub_id=305&v_id=XIi19-0Nb2G0jjag4k0gyHqI16_x1m1z4La0DOsO1DM.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://update.safe2download.tech/dl.php?askjf=Iu5sv4NYl_zlgN93nmUm2GAAg-MzAOgMZUlagyP7ABQ.&cid=MTA1MHw1MjA1fFVTfDN8MXx8Y3pKeipTa1pET1RBelgxaFZjVmRFY2xwV2JtRXRVR05XVWtKWGRUUlFZall8fA&conversion_id=14623356346030&app_id=4&lp_id=1600&v=tribat&stub_id=305&v_id=ZxcJQG-RXaYYGhQqHoB2JkemJuKmxLMydwEEcopeyk0.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://update.safe2download.tech/dl.php?askjf=10QydW4wk10InnO0nVjw-Gm4HrFaEMU2YL_WW3YFynE.&cid=MTA1MHw1MjA3fFVTfDN8MXx8Y3pKeipTazFETVRjNE5sOVVOa015VVc5blpHOTNMVkJqVmxKQ1YzVTBVR0kyfHw&conversion_id=14623300930214&app_id=4&lp_id=1379&v=tribat&stub_id=305&v_id=hLMW3i4tjG6x4LClZOSyDsE4i9ECnvLCjToIUnGzq44.&lpp=*-*-*  (flash_player_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.