home

www.safe-plugin-update.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.safe-plugin-update.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tokyo, Tokyo within Japan which resides on the Asia Pacific Network Information Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Tokyo, Japan (JP)

Create date:
Monday, September 2, 2013

Expires date:
Tuesday, September 2, 2014

Updated date:
Monday, September 2, 2013

ASN:
AS17506 UCOM UCOM Corp.,JP

Root domain:
safe-plugin-update.com

Whois:
1 safe-plugin-update.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!0675B32ABAD7, Artemis!979160EAD714, Artemis!F7F284D87876, Artemis!829EF0C392B0, Artemis!A4EBA243CB25
100.00%

Malwarebytes
PUP.Downware
100.00%

avast!
Win32:Adware-AZL [Adw]
100.00%

Dr.Web
Adware.Downware.1402
100.00%

VIPRE Antivirus
Jottix
100.00%

Sophos
Jottix
100.00%

SUPERAntiSpyware
PUP.Downloader/Variant
100.00%

ESET NOD32
Win32/DownWare
100.00%

Rising Antivirus
Trojan.Win32.Generic.137A42C9, PE:Trojan.Win32.Generic.137A42C9!326779593
100.00%

AVG
MalSign.Generic
100.00%

Reason Heuristics
PUP.Installer.JottixinternationalmediaGM2007.Z, Adware.Installer.JottixinternationalmediaGM2007.Z, PUP.JottixinternationalmediaGM2007.Y
100.00%

Qihoo 360 Security
Win32/Trojan.a16, HEUR/Malware.QVM06.Gen
80.00%

Trend Micro House Call
TROJ_GEN.F47V0924, TROJ_GEN.R0CBH05LR13, ADW_DOWNWARE
60.00%

K7 AntiVirus
Unwanted-Program
60.00%

Bkav FE
W32.Clode90.Trojan, W32.Clod034.Trojan
40.00%

The domain www.safe-plugin-update.com has been seen to resolve to the following IP address.

58.158.177.102
58x158x177x102.ap58.ftth.ucom.ne.jp
May 24, 2016

File downloads found at URLs served by www.safe-plugin-update.com.

14 / 68    (PUP)
http://www.safe-plugin-update.com/download/files/safe-plugin-update/.../media-plugin-update_setup.exe  (523ef431140ba05c76011288.exe)

16 / 68    (PUP)
http://www.safe-plugin-update.com/download/files/safe-plugin-update/.../media-plugin-update_setup.exe  (52520ebe140ba0a20e000d70.exe)

13 / 68    (PUP)
http://www.safe-plugin-update.com/download/files/safe-plugin-update/.../media-plugin-update_setup.exe  (f7f284d87876428851454637fc4f2f50)

17 / 68    (PUP)
http://www.safe-plugin-update.com/download/files/safe-plugin-update/.../media-plugin-update_setup.exe  (979160ead714e900096d03424e15dd8f)

12 / 68    (PUP)
http://www.safe-plugin-update.com/download/files/safe-plugin-update/.../media-plugin-update_setup.exe  (0675b32abad7244cc950d295796dcf27)

The following 13 files have been seen to comunicate with www.safe-plugin-update.com in live environments.

TCP » 58.158.177.102:1337
mcmyop.exe

TCP » 58.158.177.102:1177
ee9456f4f04c4cc45b9e8fcb804dc064.exe

TCP » 58.158.177.102:49293
1581.xml (Nkth8tnbTaR by NO4WFYURvm)

TCP » 58.158.177.102:49293
---.exe (RPD4Ne by OjCnl5JJWu)

TCP » 58.158.177.102:80
acroedit.exe (Edown_mfc Application)

TCP » 58.158.177.102:1177
trojan.exe (.netshrink by PELock Software)

TCP » 58.158.177.102:80
igfxext.exe

TCP » 58.158.177.102:80
vaudix.exe (Setup by Premium)

TCP » 58.158.177.102:80
update.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 58.158.177.102:80
age-of-adventure-playing-the-hero-2-es-en-fr-win.exe (Setup by Premium)

TCP » 58.158.177.102:49293
---.exe (s4NeO4W by CJWuPD)

TCP » 58.158.177.102:80
igfxext.exe

TCP » 58.158.177.102:7776
service.exe (WwaTkjMuJh by Windows Services)

Alexa:
Global rank:  85,627
Backlinks:  12

Compete.com:
US visitors:  948,525

Statistics are for the previous month (Alexa statistics are for entire safe-plugin-update.com).

lastupload.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.