home

updater.mediatuneup.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain updater.mediatuneup.com is registered by proxy through GODADDY.COM, LLC and was originally registered in November of 2006. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Sunday, November 5, 2006

Expires date:
Wednesday, November 15, 2017

Updated date:
Sunday, November 15, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
mediatuneup.com

Whois:
1 mediatuneup.com record

The domain updater.mediatuneup.com has been seen to resolve to the following 23 IP addresses.

54.192.195.44
server-54-192-195-44.iad53.r.cloudfront.net
February 21, 2016

54.192.195.7
server-54-192-195-7.iad53.r.cloudfront.net
February 21, 2016

54.192.195.237
server-54-192-195-237.iad53.r.cloudfront.net
February 21, 2016

54.192.195.180
server-54-192-195-180.iad53.r.cloudfront.net
February 21, 2016

54.192.195.177
server-54-192-195-177.iad53.r.cloudfront.net
February 21, 2016

54.192.195.144
server-54-192-195-144.iad53.r.cloudfront.net
February 21, 2016

54.192.195.85
server-54-192-195-85.iad53.r.cloudfront.net
February 21, 2016

54.192.195.77
server-54-192-195-77.iad53.r.cloudfront.net
February 21, 2016

54.192.195.104
server-54-192-195-104.iad53.r.cloudfront.net
February 9, 2016

54.192.195.103
server-54-192-195-103.iad53.r.cloudfront.net
February 9, 2016

54.192.195.94
server-54-192-195-94.iad53.r.cloudfront.net
February 9, 2016

54.192.195.36
server-54-192-195-36.iad53.r.cloudfront.net
February 9, 2016

54.192.195.184
server-54-192-195-184.iad53.r.cloudfront.net
February 9, 2016

54.192.195.171
server-54-192-195-171.iad53.r.cloudfront.net
February 9, 2016

54.192.195.158
server-54-192-195-158.iad53.r.cloudfront.net
February 9, 2016

54.192.195.246
server-54-192-195-246.iad53.r.cloudfront.net
January 4, 2016

54.192.195.233
server-54-192-195-233.iad53.r.cloudfront.net
January 4, 2016

54.192.195.181
server-54-192-195-181.iad53.r.cloudfront.net
January 4, 2016

54.192.195.169
server-54-192-195-169.iad53.r.cloudfront.net
January 4, 2016

54.192.195.141
server-54-192-195-141.iad53.r.cloudfront.net
January 4, 2016

54.192.195.140
server-54-192-195-140.iad53.r.cloudfront.net
January 4, 2016

54.192.195.53
server-54-192-195-53.iad53.r.cloudfront.net
January 4, 2016

54.192.195.28
server-54-192-195-28.iad53.r.cloudfront.net
January 4, 2016

File downloads found at URLs served by updater.mediatuneup.com.

0 / 68
http://updater.mediatuneup.com/win3/.../TuneUpInst-3.0.5.3.exe  (960cd525e3b54047d705f17833250a5d)

0 / 68
http://updater.mediatuneup.com/win3/.../TuneUpInst-3.0.4.3.exe  (76247093e5f75611cc388827ebf5c131)

0 / 68
http://updater.mediatuneup.com/win3/.../TuneUpInst-3.0.7.0.exe  (3572eae8602f5bf05134669483f97cbf)

1 / 68      (Malware)
http://updater.mediatuneup.com/update/.../TuneUpInst-2.5.6.3.exe  (6c0635a627d2c999dca275e174e36e00)

1 / 68      (Malware)
http://updater.mediatuneup.com/.../TuneUpInst-2.6.0.3.exe  (46362e6363a23246f84f36664f2e97d8)

The following 7 files have been seen to comunicate with updater.mediatuneup.com in live environments.

TCP » 54.192.195.158:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.94:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.158:443
onlineguardian-v2.exe

TCP » 54.192.195.158:443
online-guardian.exe

TCP » 54.192.195.94:443
online-guardian.exe

TCP » 54.192.195.181:443
onlineguardian-v2.exe

TCP » 54.192.195.171:443
browser.exe (Browser)

TCP » 54.192.195.177:443
online-guardian.exe

TCP » 54.192.195.177:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.195.104:443
browser.exe (speed browser by Fast Applications)

TCP » 54.192.195.181:443
online-guardian-v2.exe

TCP » 54.192.195.7:443
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.192.195.158:443
online-guardian-v2.exe

TCP » 54.192.195.177:443
onlineguardian-v2.exe

URL:
http://updater.mediatuneup.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.