home

versionlast.clickonupdate.top

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
clickonupdate.top

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OOOELEKT.Installer (M)
100.00%

Dr.Web
Trojan.InstallCore.1954
33.33%

The domain versionlast.clickonupdate.top has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
May 24, 2016

File downloads found at URLs served by versionlast.clickonupdate.top.

1 / 68      (PUP)
http://versionlast.clickonupdate.top/dl.php?hbyvr=mwK9xqzoV7CJFZFuMzUljhhSqRfSzOS0OjpXu8EpXWQ.&cid=MTA2Mnw1MjEyfFVLfDN8MXxzdWJpZF9NYWNyb19IZXJlfGN6SnoqVm1wS09FNXFXWGhPUkZJNFRXcGpNazFxUlhsbVJGRjNUVlJGTlUxWWQzaE9SRmw0VGtSSk1FMXFVVE5tUjAwMVdYcHNiRnB0VlhwTVZGSnBUVVJCZEU1RVpHMU9hVEZxVG5wU2FFeFhSbWxOTWxwb1RtcFdhMDlVYXpKWk0zYzBUbWswZUUxVE5IaE9lbGwxVFZSWk0yWklkekJtUjFwcFRWUkZOVTVFUlhoYVIwMHhXbTFSZVU5RVozZE5WMVp0V2tkRk1FNVVWbTFOUjBwc1dWUk9hQX5jMjkxY21ObCpOall4TkRRfHw&conversion_id=14614242552779&app_id=4&lp_id=1602&v=tribat&stub_id=305&v_id=fk5P0UGMg9EWwH3nxbnrtW5e9KKkllNXooGBhtK22LU.&lpp=*-*-*  (adobe_flash_setup.exe)

2 / 68      (PUP)
http://versionlast.clickonupdate.top/dl.php?hbyvr=mwK9xqzoV7CJFZFuMzUljhhSqRfSzOS0OjpXu8EpXWQ.&cid=MTA1MXw1MjEyfFVLfDN8MXx8Y3pKeipTazFETVRJMU9WOXNaVUk0YVVWemNtOXRMVkJqVmxOQ1YzVTFVR0ZofHw&conversion_id=14614385334001&app_id=4&lp_id=1362&v=tribat&stub_id=305&v_id=AxsHrrSQIXq8ZeuNUW5Q4szYBJhXtY-5sCAHuCDgEXQ.&lpp=*-*-*  (adobe_flash_setup.exe)

1 / 68      (PUP)
http://versionlast.clickonupdate.top/dl.php?zcvz=mwK9xqzoV7CJFZFuMzUljhhSqRfSzOS0OjpXu8EpXWQ.&cid=MTA2Mnw1MjEyfFVLfDN8MXxzdWJpZF9NYWNyb19IZXJlfGN6SnoqVm1wS09FMTZUVFZOU0hkNVRucFplVTFFVmpoTmVsbDNUbFJqTW1aRVJUQk9ha1V4VG5wWk1VOVViRGhhUkZWM1dtcG9iVTVVWjNSWlZGWnRXWGt3TUU5VVp6Sk1WMDAxV1cxUmRFOVVRVEJOTWxFeFRucGpORnBYU1hwbVJFVXhUVk0wZVUxcWEzVk5WR016VEdwRk5FMVllRGhOV0hodFdXcEZlRTlVVVhoTlYxSnFUbGRhYTAxcVp6Uk5SRVpzV20xU2FFNUVWVEZhYWtKcFdsZEZlbGxSUFQwfmMyOTFjbU5sKk16TTVNQXx8&conversion_id=14615766219942&app_id=4&lp_id=1362&v=tribat&stub_id=305&v_id=DX5_fI1zV7Otvms-BBN5EWnp7Eu2MWYhMpI2Ihxgffo.&lpp=*-*-*  (adobe_flash_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.