home

update2now.secure-updates.site

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 , FR

Root domain:
secure-updates.site

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DigitalZ.Installer (M)
100.00%

The domain update2now.secure-updates.site has been seen to resolve to the following IP address.

163.172.197.166
163-172-197-166.rev.poneytelecom.eu
July 19, 2016

File downloads found at URLs served by update2now.secure-updates.site.

1 / 68      (PUP)
http://update2now.secure-updates.site/dl.php?rtyru=w0itXh8ahT4robo0nTTbKfLKcEyPswuNjl7u7peJCY0.&cid=15775897111466344659&conversion_id=14663446601887&app_id=4&lp_id=954&v=tribat&stub_id=305&v_id=-4PmEkvSEAN4o9wI7aENxsMna5y9c3JMGkTNtpYgTB4.&lpp=*-*-*  (adobe flash player.exe)

1 / 68      (PUP)
http://update2now.secure-updates.site/dl.php?rtyru=_UCFXR4TNIaW8gB054H6FxHPFIidrjTwpsuceju4Vp0.&cid=6373_7769004379_PeN2c&conversion_id=14663406229542&app_id=4&lp_id=1674&v=tribat&stub_id=305&v_id=IF240snI98TtfkJ0jJNaWHzPmEVe0vOvoGRhvJjxUGs.&lpp=No match  (adobe flash player.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.