home

www.ulan.com

WebReg RareNames

Domain Information

The domain www.ulan.com registered by WebReg RareNames was initially registered in January of 2001 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Linode network.
Registrar:
GODADDY.COM, LLC

Server location:
Texas, United States (US)

Create date:
Wednesday, January 17, 2001

Expires date:
Sunday, January 17, 2016

Updated date:
Monday, October 27, 2014

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:
ulan.com

Whois:
2 ulan.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Conduit.6, Adware.Downware.988, Adware.Conduit.33, Adware.Conduit.82, Adware.Conduit.38
88.89%

ESET NOD32
Win32/OpenCandy, Win32/Wajam (variant), Win32/Toolbar.Conduit, Win32/Toolbar.Conduit.AE (variant), Win32/Conduit.SearchProtect
88.89%

Reason Heuristics
PUP.Conduit.G, PUP.307182.Conduit.H, PUP.Conduit.H, PUP.Conduit.L, PUP.4605.Conduit.O
88.89%

VIPRE Antivirus
Conduit
77.78%

Malwarebytes
PUP.Optional.Conduit.A
66.67%

Trend Micro House Call
TROJ_GEN.F47V0827, TROJ_GEN.F47V0913, TROJ_GEN.F47V0206, TROJ_GEN.F47V0421
44.44%

Panda Antivirus
PUP/Conduit.A
44.44%

McAfee
Artemis!DC1FF2B48A9D, Artemis!EF72B22F2079, Artemis!EE370ECB8702
33.33%

Kaspersky
not-a-virus:Downloader.NSIS.Agent, not-a-virus:WebToolbar.JS.Condonit
22.22%

AVG
Toolbar.Conduit
22.22%

Boost by Reason
Adware.Conduit.G
11.11%

herdProtect (fuzzy)
a variant of 3f02e64aa553c1fa7975021f22eebb058042e086
11.11%

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
11.11%

K7 AntiVirus
Unwanted-Program
11.11%

G Data
NSIS.Application.SearchProtect
11.11%

The domain www.ulan.com has been seen to resolve to the following 3 IP addresses.

80.179.12.15
80.179.12.15.static.012.net.il
September 5, 2014

198.58.103.94
li553-94.members.linode.com
February 6, 2014

176.58.118.236
li517-236.members.linode.com
February 6, 2014

File downloads found at URLs served by www.ulan.com.

7 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=10&t=&cookie=true  (radiog.exe)

7 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=10&t=  (radiog.exe)

7 / 68      (PUP)
http://www.ulan.com/dl.php?p=38&so=1&si=38&t=&cookie=true  (myga_chrome.exe)

7 / 68      (PUP)
http://www.ulan.com/dl.php?p=38&so=1&si=38&t=  (myga_chrome.exe)

2 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=38&t=&cookie=true  (TB_Myga.exe)

2 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=38&t=  (TB_Myga.exe)

8 / 68      (PUP)
http://www.ulan.com/dl.php?p=53&so=1&si=96&t=&cookie=true  (gj_ch.exe)

8 / 68      (PUP)
http://www.ulan.com/dl.php?p=53&so=1&si=96&t=  (gj_ch.exe)

3 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=17&t=&cookie=true  (radiog.exe)

3 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=17&t=  (radiog.exe)

8 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=39&t=&cookie=true  (radiog.exe)

8 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=39&t=  (radiog.exe)

2 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=25&t=scary-dot-game&cookie=true  (TB_Myga.exe)

2 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=25&t=scary-dot-game  (TB_Myga.exe)

2 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=13&t=&cookie=true  (TB_Myga.exe)

2 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=13&t=  (TB_Myga.exe)

4 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=81&t=&cookie=true  (tb_myga.exe)

4 / 68      (PUP)
http://www.ulan.com/dl.php?p=8&so=1&si=81&t=  (tb_myga.exe)

3 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=53&t=&cookie=true  (radiog.exe)

3 / 68      (PUP)
http://www.ulan.com/dl.php?p=2&so=1&si=53&t=  (radiog.exe)

URL:
http://www.ulan.com/

Google Analytics:
UA-23456424

Title:
“Loke Games - Multiplayer Games Online”

Web server:
Apache

Facebook:
Likes:  468
Shares:  211
Comments:  36

Twitter:
Shares:  36

Quantcast US:
Rank:  352,223

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.