The domain clipskeeper.com is registered by proxy through ENOM, INC. and was originally registered in November of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Noord-Holland, Netherlands (NL)
Friday, November 23, 2012
Wednesday, November 23, 2016
Saturday, December 19, 2015
AS39572 ADVANCEDHOSTERS-AS ADVANCEDHOSTERS LIMITED
Detections (80% detected)
Win32:Adware-BJY [PUP], Win32:Amonetize-P [PUP], Win32:Amonetize-AM [PUP], Win32:Amonetize-BJ [PUP], Win32:Dropper-gen [Drp], NSIS:InstMonetizer-AK [PUP]
PUP.Optional.Amonetize.A, PUP.Optional.Handy.A, PUP.Optional.Remarkit
Adware.Downware.1575, Adware.Downware.2467, Adware.Downware.3925, Adware.Downware.1584, Detection.Undefined
Win32/Amonetize.AG (variant), Win32/Amonetize.AI (variant), Win32/Amonetize.AJ (variant), Win32/Amonetize.AS (variant), Win32/ActiveMonetizer
Qihoo 360 Security
Win32/Virus.Adware.47b, Win32/Trojan.Adware.37e, Win32/Virus.Adware.932, Win32/Trojan.Dropper.c9f
McAfee Web Gateway
Artemis!8D3386F3ACE9, Artemis!3D7A2AAABBBC, Artemis!52DE26D456C5, PUP-FBM!2C78E5FBC36C, BehavesLike.Win32.SoftDropper.fc
PUP.Installer.ShetefSolutionsConsulting1998.?, PUP.Wilmaonline.R, PUP.Installer.Amonetizeltd.a, Threat.Win.Reputation.IMP
Artemis!8D3386F3ACE9, Artemis!3D7A2AAABBBC, Artemis!52DE26D456C5, PUP-FBM!2C78E5FBC36C
AhnLab V3 Security
Trend Micro House Call
TROJ_GEN.F47V0303, TROJ_GEN.F47V0310, TROJ_GEN.F47V0412
The domain clipskeeper.com has been seen to resolve to the following IP address.
File downloads found at URLs served by clipskeeper.com.
“GotCLIP Downloader -”
Apache/2.2.23 (Unix) PHP/5.2.17 (PHP/5.2.17)