home

upgradelive.clickonupdate.xyz

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
clickonupdate.xyz

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.InstallCore.1954
100.00%

Reason Heuristics
PUP.OOOELEKT.Installer (M)
100.00%

The domain upgradelive.clickonupdate.xyz has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
May 26, 2016

File downloads found at URLs served by upgradelive.clickonupdate.xyz.

2 / 68      (PUP)
http://upgradelive.clickonupdate.xyz/dl.php?gtrevt=EfQXN4ORWcK92vplRojjDhq9r9s4D2Mdj0nUGl7ECGE.&cid=174998716806&sid=296416&conversion_id=14615335972756&app_id=4&lp_id=1542&v=tribat&stub_id=305&v_id=sUsReGbmBm7DZI4Za2StvKeZVDPISHCHc-AHKb_3iOg.&lpp=*-*-*  (adobe_flash_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.