home

update4now.secure-updates.site

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
secure-updates.site

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OOOELEKT.Installer (M)
100.00%

The domain update4now.secure-updates.site has been seen to resolve to the following IP address.

163.172.197.165
163-172-197-165.rev.poneytelecom.eu
July 17, 2016

File downloads found at URLs served by update4now.secure-updates.site.

1 / 68      (PUP)
http://update4now.secure-updates.site/dl.php?rtyru=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8MzI0Mnw0Njg2OTF8MzI3MDU1fDE0NjY3NjA0MjN8MWFlYTI3NWItMmU5OS00OTk0LWM5NjctOWZkZjA2Mzk2ODdifDEyNy4wLjAuMXxwc2lkYWI3XzF8MXwxMTU0MzlmNWI2NTU3Yjc5NGZkNDg5NTY2OWVhMDE4Mw==&conversion_id=14667604491762&app_id=4&lp_id=1379&v=tribat&stub_id=305&v_id=AUmdqunIaiDyecl_p6uII1TRNvNsJ6cChlJumJQFrHY.&lpp=w10*-*-*  (adobeflashplayer.exe)

1 / 68      (PUP)
http://update4now.secure-updates.site/dl.php?rtyru=S4uNCVdZc7Y5SRsOfssmpG_G93cOBz-H7RVyhtTnxxs.&cid=31040193011466774514&conversion_id=14667745205337&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=sNeg6ZI8cpbvc8zZPY0dyx9O1VXz_TE_bT9No82vWFM.&lpp=*-*-*  (adobeflashplayer.exe)

1 / 68      (PUP)
http://update4now.secure-updates.site/dl.php?rtyru=RmukkuNC2r8uJlSVUpNwF4mmWT4ez4F4NnW8Lg1mtXs.&cid=29536461021466778329&conversion_id=14667783329918&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=WwanLCdPosgzS_9Yr6ZjgNFWZ1fIpniepaU8A8eO6Ak.&lpp=No match  (adobeflashplayer.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.