www.updownsing.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.updownsing.com is registered by proxy through ENOM, INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Miami Beach, Florida within the United States which resides on the Krypt Technologies network.
Registrar:
ENOM, INC.

Server location:
Florida, United States (US)

Create date:
Tuesday, April 29, 2014

Expires date:
Wednesday, April 29, 2015

Updated date:
Tuesday, April 29, 2014

ASN:
AS35908 VPLSNET - Krypt Technologies,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ClovermediaSL.E, PUP.Tuguu.Clovermedia.Bundler (M)
100.00%

VIPRE Antivirus
DomaIQ
50.00%

Dr.Web
Trojan.DownLoader11.5325
50.00%

Microsoft Security Essentials
Threat.Undefined
50.00%

avast!
Win32:Installer-U [PUP]
50.00%

ESET NOD32
Win32/DomaIQ.BB (variant)
50.00%

AVG
Adware DomaIQ_r.K
50.00%

Kaspersky
not-a-virus:AdWare.MSIL.DomaIQ
50.00%

MicroWorld eScan
Gen:Variant.Adware.Kazy.374465
50.00%

nProtect
Trojan-Clicker/W32.Agent.499184
50.00%

Quick Heal
Adware.DomaIQ.BT5
50.00%

McAfee
CryptDomaIQ
50.00%

Malwarebytes
PUP.Optional.BundleInstaller.A
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Agnitum Outpost
PUA.Lollipop
50.00%

The domain www.updownsing.com has been seen to resolve to the following IP address.

www.krypt.com
August 12, 2014

File downloads found at URLs served by www.updownsing.com.

1 / 68      (Adware)
http://www.updownsing.com/.../Java.exe  (94fa52085933e94f4b59259f9cea74e1)

34 / 68    (Adware)
http://www.updownsing.com/.../Java.exe  (37f9432dc5b3939a39de665943220c82)