home

update.simplemc.net

Weber Martin

Domain Information

The domain update.simplemc.net registered by Weber Martin was initially registered in April of 2013 through OVH. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
OVH

Server location:
Arizona, United States (US)

Create date:
Friday, April 19, 2013

Expires date:
Tuesday, April 19, 2016

Updated date:
Sunday, April 19, 2015

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:
simplemc.net

Whois:
1 simplemc.net record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.installCore.RingierA.Installer (M)
42.86%

Avira AntiVirus
W32/Mabezat
14.29%

Trend Micro House Call
TROJ_GEN.R0CBH07K313
14.29%

AegisLab AV Signature
Troj.Spy.MSIL.KeyLogger
14.29%

F-Secure
Gen:Variant.Kazy.753440
14.29%

Emsisoft Anti-Malware
Gen:Variant.Kazy.753440
14.29%

Lavasoft Ad-Aware
Gen:Variant.Kazy.753440
14.29%

MicroWorld eScan
Gen:Variant.Kazy.753440
14.29%

Kaspersky
UDS:DangerousObject.Multi.Generic
14.29%

Bitdefender
Gen:Variant.Kazy.753440
14.29%

Arcabit
Trojan.Kazy.DB7F20
14.29%

G Data
Gen:Variant.Kazy.753440
14.29%

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
14.29%

Dr.Web
Trojan.DownLoader19.22290
14.29%

The domain update.simplemc.net has been seen to resolve to the following 2 IP addresses.

104.28.21.115
March 31, 2016

104.28.20.115
March 31, 2016

File downloads found at URLs served by update.simplemc.net.

2 / 68      (Malware)
http://update.simplemc.net/Minecraft.exe  (MinecraftZyczu.exe)

8 / 68      (Malware)
http://update.simplemc.net/Minecraft.exe  (3e9cafcf5f574833c0f33cb5ed6fa391)

0 / 68
http://update.simplemc.net/Minecraft.exe  (605a171c61a0607bdcf6be80ed07cf95)

0 / 68
http://update.simplemc.net/Minecraft.exe  (0346936f75234968ee85809927736f2b)

1 / 68
http://update.simplemc.net/Minecraft.exe  (6762c53af17c76d60b76e93d476b00fd)

0 / 68
http://update.simplemc.net/Minecraft.exe  (minecraft-teamextreme-1.6.2-warez-launcher.exe)

1 / 68      (Adware)
http://update.simplemc.net/Minecraft.exe  (126563d7590f599aa89f69d5cbd2a0be)

1 / 68      (inconclusive)
http://update.simplemc.net/Minecraft.exe  (dfc6c22683231c71e6844e9dedf9807a)

1 / 68
http://update.simplemc.net/Minecraft.exe  (75838e6f50e859d819d1eb57e1262e0a)

2 / 68      (Malware)
http://update.simplemc.net/Minecraft.exe  (3c166bae84553d4cb27af8abdc61712d)

URL:
http://update.simplemc.net/

SSL certificate subject:
CN=sni32880.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.