home

dcu.download-sponsor.de

Domain Information

Server location:
Bayern, Germany (DE)

ASN:
AS24940 HETZNER-AS Hetzner Online AG,DE

Root domain:
download-sponsor.de

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Chip.Bundler.Installer.Meta (M), PUP.ThinkLAB.Bundler (M)
100.00%

The domain dcu.download-sponsor.de has been seen to resolve to the following 2 IP addresses.

148.251.198.119
www2.thinklabs-cluster.de
April 13, 2016

148.251.198.118
www1.thinklabs-cluster.de
April 13, 2016

File downloads found at URLs served by dcu.download-sponsor.de.

1 / 68      (PUP)
http://dcu.download-sponsor.de/?source=DSfeedbackResume&pid=dcu&cid=125623&cdata=utyp-31.userid-343162333836623735326664313735646536336638303761.ua-6368726f6d652e657865  (eav_nt32_hun_5.0.94.msi.exe)

1 / 68      (PUP)
http://dcu.download-sponsor.de/?source=DSfeedbackResume&pid=dcu&cid=100098&cdata=utyp-31.ua-6368726f6d652e657865.userid-343562326339613438666134633766316637313234636264  (rar-password-cracker-4-12.exe)

The following 44 files have been seen to comunicate with dcu.download-sponsor.de in live environments.

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
ocs_v71a.exe (OCS)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

TCP » 148.251.198.119:80
ocs_v71b.exe (OCS)

TCP » 148.251.198.118:80
dmr_72.exe (CHIP Secured Installer by Chip Digital GmbH)

 
Latest 20 of 71 files

chip.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.