clping.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain clping.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Friday, August 05, 2011

Expires date:
Friday, August 05, 2016

Updated date:
Thursday, August 06, 2015

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Systweak.ThePhone.Installer.Meta (L), PUP.WHIZBANG.Installer (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.InstallCore.Installer.Installer (M), PUP.Air Software.AirSoftware.Bundler (M), PUP.installCore.ClickMeI.Installer (M), PUP.NewMedia.NMH.Bundler (M), PUP.Softpulse.DIGITALP.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse.SmartSec.Bundler (M), PUP.NewMedia.NMH (M), PUP (M), PUP.Softpulse (M)
90.91%

Kaspersky
not-a-virus:Downloader.Win32.Agent
21.21%

Dr.Web
Trojan.DownLoader10.52095, Trojan.InstallCore.890
21.21%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
18.18%

F-Prot
W32/Downldr2.IYIR
15.15%

ESET NOD32
Win32/TrojanDownloader.Autoit.NLI trojan, Win32/InstallCore.ACZ potentially unwanted application
15.15%

Clam AntiVirus
W32.Trojan.Spy-737
12.12%

Sophos
Generic PUA EO, Mal/Generic-S, PUA 'Install Core Click run software'
9.09%

AVG
Autoit_c, Adware InstallCore
9.09%

CMC Antivirus
Trojan.Win32.Generic!O
6.06%

McAfee
Artemis!910E3F9A91F0, Artemis!4D5381C1FED0
6.06%

avast!
AutoIt:Dropper-AB [Trj], Win32:Adware-gen [Adw]
6.06%

Comodo Security
UnclassifiedMalware
6.06%

McAfee Web Gateway
Artemis!910E3F9A91F0, Artemis!Trojan
6.06%

Kingsoft AntiVirus
Win32.Troj.Undef.(kcloud)
6.06%

The domain clping.com has been seen to resolve to the following 2 IP addresses.

ip-184-168-221-76.ip.secureserver.net
August 10, 2016

50-56-56-58.static.cloud-ips.com
January 24, 2014

File downloads found at URLs served by clping.com.

 
Latest 30 of 40 download URLs

The following file have been seen to comunicate with clping.com in live environments.

May 26, 2016

February 23, 2015

January 24, 2014