opensoftwareupdater.com

GlobalDnsProvider.com Inc

Domain Information

The domain opensoftwareupdater.com registered by GlobalDnsProvider.com Inc was initially registered in February of 2014 through TLDS, LLC DBA SRSPLUS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Los Angeles, California within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
TLDS, LLC DBA SRSPLUS

Server location:
California, United States (US)

Create date:
Friday, February 21, 2014

Expires date:
Tuesday, February 21, 2017

Updated date:
Monday, February 22, 2016

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.INSTALLERTECHNOLOGYCO.J, PUP.Installer.INSTALLERTECHNOLOGYCO.N, PUP.INSTALLERTECHNOLOGYCO.S, PUP.INSTALLERTECHNOLOGYCO.P, PUP.InstallerTechnologyCo.P, PUP.INSTALLERTECHNOLOGYCO.Installer (M), PUP.INSTALLERTECHNOLOGYCO (M), PUP.InstallerTech.InstallerTechnologyCo.Installer.Meta (M), PUP.INSTALLE (M), PUP.Dowloader.Installer.Meta (M), PUP.InstallerTech.Installer.Meta (M), PUP.InstallerTech.Meta (M)
91.67%

Rising Antivirus
NS:PUF.SilenceInstaller!1.9DDF, NS:PUF.SilenceInstaller!1.9DDF[F1]
58.33%

Dr.Web
Adware.Downware.2519, Adware.Downware.3736, Adware.Downware.2185, Adware.Downware.12954, Adware.Downware.9973, Adware.Downware.14087
50.00%

VIPRE Antivirus
InstallerTech, Threat.4786240
47.92%

Sophos
Installer Technology Co, PUA 'Installer Technology Co'
39.58%

McAfee Web Gateway
Heuristic.BehavesLike.Win32.Suspicious-PKR.G, Artemis, BehavesLike.Win32.BadFile.fc, RDN/Generic.hra!by, BehavesLike.Win32.Downloader.fc
29.17%

McAfee
Artemis!6ED90DB4C05C, Artemis!5F9FE41F925E, Artemis!6C321553C464, Artemis!E1B6701ACA8F, Artemis!70559443E5E4, Artemis!152F08C77249, Artemis!92A9B8255730, Artemis!DABA63F5EDCB, Artemis!F457551CFA04, Artemis!9605BD2C27E9
25.00%

Trend Micro House Call
Suspicious_GEN.F47V0628, Suspicious_GEN.F47V0807, Suspicious_GEN.F47V0730, Suspicious_GEN.F47V0718, Suspicious_GEN.F47V0626, Suspicious_GEN.F47V0203
18.75%

ESET NOD32
Win32/AdWare.GorillaPrice, Win32/Packed.VMDetector, Win32/Conduit.SearchProtect.Z potentially unwanted, Win32/Packed.VMDetector (variant)
8.33%

IKARUS anti.virus
PUA.VMDetector, Virus.SuspectCRC, PUA.SearchProtect
8.33%

ESET NOD32
Win32/Packed.VMDetector.G potentially unwanted application, Win32/OpenDownloadManager.A potentially unwanted application
8.33%

K7 AntiVirus
Unwanted-Program
6.25%

Malwarebytes
PUP.Optional.OpenSoftwareUpdater, PUP.Optional.Bundle
6.25%

Kaspersky
not-a-virus:Downloader.Win32.Agent
6.25%

G Data
Generic.Malware.FPVPk!g.0B5B965F, Win32.Application.VMDetect
4.17%

The domain opensoftwareupdater.com has been seen to resolve to the following 22 IP addresses.

July 1, 2016

July 1, 2016

July 1, 2016

July 1, 2016

July 1, 2016

January 4, 2016

January 4, 2016

January 4, 2016

January 4, 2016

January 4, 2016

October 29, 2015

October 29, 2015

October 29, 2015

October 29, 2015

October 29, 2015

May 4, 2015

May 4, 2015

May 4, 2015

May 4, 2015

May 4, 2015

March 27, 2014

March 27, 2014

File downloads found at URLs served by opensoftwareupdater.com.

3 / 68      (PUP)

1 / 68      (PUP)

7 / 68      (Adware)

URL:
http://opensoftwareupdater.com/

Title:
“Open Software Updater”

SSL certificate subject:
CN=ssl346512.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

Facebook:
Likes:  2
Shares:  5
Comments:  8

Statistics above are for the previous month of October 2017.