home

dotation100pertinent.top

Domain Information

Server location:
Chisinau, Republic Of Moldova (MD)

ASN:
AS43289 TRABIA trabia network, MD

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.DesktopE.Installer (M)
100.00%

The domain dotation100pertinent.top has been seen to resolve to the following 3 IP addresses.

162.255.119.250
June 25, 2016

178.175.130.163
June 19, 2016

178.175.130.162
178-175-130-162.static.host
June 18, 2016

File downloads found at URLs served by dotation100pertinent.top.

1 / 68      (PUP)
http://dotation100pertinent.top/download/lp/33571?lpm_id=972&page=/3wjaavs/181425/972/hyk7w/.../gd5n  (hdvideoplayer_0368813340.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/.../32192?lpm_id=972  (hdvideoplayer_0579542166.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/lp/33809?lpm_id=972&page=/191023/972/.../565  (hdvideoplayer_2175093361.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/lp/33851?lpm_id=972&page=/191358/972/.../i4s8  (hdvideoplayer_0626228467.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/lp/33796?lpm_id=972&page=/19922/972/fr8/.../5272  (hdvideoplayer_0872057123.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/lp/33802?lpm_id=972&page=/19951/972/b6/.../9829  (hdvideoplayer_2936654418.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/.../26437?lpm_id=972  (hdvideoplayer_3247821770.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/.../27618?lpm_id=972  (hdvideoplayer_3074088104.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/.../28289?lpm_id=972  (hdvideoplayer_3827843597.exe)

1 / 68      (PUP)
http://dotation100pertinent.top/download/.../27713?lpm_id=972  (hdvideoplayer_1589569846.exe)

The following 84 files have been seen to comunicate with dotation100pertinent.top in live environments.

TCP » 178.175.130.163:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 178.175.130.163:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 178.175.130.163:80
dailybee.exe

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 178.175.130.163:80
UCBrowser.exe (by UCWeb)

TCP » 178.175.130.163:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 178.175.130.163:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 178.175.130.163:80
jingling.exe

TCP » 178.175.130.163:80
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 178.175.130.163:80
jingling.exe

 
Latest 20 of 119 files

July 17, 2016
1brz.dotation100pertinent.top

July 28, 2016
iq5.dotation100pertinent.top

July 9, 2016
j.dotation100pertinent.top

July 3, 2016
lw7.dotation100pertinent.top

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.