Phishing Website: Update91.com – Flash Player Pro

Sean Davis

Sean is an engineer from Los Angeles, California. His primary focuses include internet security and web spam. Google+

8 Responses

  1. keliadee says:

    Just an FYI–I was getting this pop up everyday, sometimes multiple pop ups of it. I finally figured out that my roommate had downloaded the “unfriend” app from facebook. It is suppose to tell you who has unfriended you. I uninstalled that app and low and behold no more pop ups or weird redirects from google.

  2. bob sones says:

    I keep getting a VERY PERSISTENT and intrusive “WARNING Your Flash Player may be out of date Please update to continue” from “treyeats.com (edited by post author)”.
    i think they are “phishing”.

    • Sean Doyle says:

      Thank you, for sake of readers the URL has been edited. The site you have mentioned will be reported.

      • Gone Byebye says:

        i’ve tracked it back to ireland here’s the report 62.249.178.200/report.php?id=1242813 but it is listed as update85.com. i started with a whois search and was lead to this IP address: 50.17.107.125/ then i did a ” view page source” which i found d1ros97qkrwjf5.cloudfront.net/42/eum/rum.js as the first url leads to something concerning apache. then i tried beacon-1.newrelic.com lead to an error page nothing of use there. next i tried 46.51.162.142/giq.js there i found d1cebafy1ctaaq.cloudfront.net/1 once again leading me to an error page. i thought i was stuck and at a dead end then i tried just “d1cebafy1ctaaq” i got 1 web site return with that info and its the report i posted above hope that this helps some.

        • Gone Byebye says:

          after double checking my search results i found that my search for “d1cebafy1ctaaq” no longer works but on checking some of the other sites on the report i was able to find out that 2 of the irish sites listed share 2 common address 1 in ireland and 1 in seattle the update91.com shares both the same ireland address and seattle one. to with it is the only on to provide a phone number and a name.no email.

    • Dave says:

      For all users using Google Chrome, the best way to avoid this issue is by installing Adblock app on Google Chrome Web Browser here is the link

      https://chrome.google.com/webstore/detail/adblock/gighmmpiobklfepjocnamgkkbiglidom?hl=en-US&utm_source=chrome-ntp-launcher

Leave a Reply

Your email address will not be published.