» clping.com
Overview
Analysis
IPs Addresses (2)
Downloads (40)
Network (1)
Subdomains (3)
Related Domains (5)

clping.com

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain clping.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Domains By Proxy, LLC

Registrar:

GODADDY.COM, LLC

Server location:

Arizona, United States (US)

Create date:

Friday, August 5, 2011

Expires date:

Friday, August 5, 2016

Updated date:

Thursday, August 6, 2015

Whois:

3 clping.com records

Scanner detections:

Detections (97% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Systweak.ThePhone.Installer.Meta (L), PUP.WHIZBANG.Installer (M), PUP.Softpulse.DigitalPlugin.Bundler (M), PUP.InstallCore.Installer.Installer (M), PUP.Air Software.AirSoftware.Bundler (M), PUP.installCore.ClickMeI.Installer (M), PUP.NewMedia.NMH.Bundler (M), PUP.Softpulse.DIGITALP.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.Softpulse.DigitalP.Bundler (M), PUP.Softpulse.SmartSec.Bundler (M), PUP.NewMedia.NMH (M), PUP (M), PUP.Softpulse (M)

90.91%

Kaspersky

not-a-virus:Downloader.Win32.Agent

21.21%

Dr.Web

Trojan.DownLoader10.52095, Trojan.InstallCore.890

21.21%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4150696

18.18%

F-Prot

W32/Downldr2.IYIR

15.15%

ESET NOD32

Win32/TrojanDownloader.Autoit.NLI trojan, Win32/InstallCore.ACZ potentially unwanted application

15.15%

Clam AntiVirus

W32.Trojan.Spy-737

12.12%

Sophos

Generic PUA EO, Mal/Generic-S, PUA 'Install Core Click run software'

9.09%

AVG

Autoit_c, Adware InstallCore

9.09%

McAfee

Artemis!910E3F9A91F0, Artemis!4D5381C1FED0

6.06%

avast!

AutoIt:Dropper-AB [Trj], Win32:Adware-gen [Adw]

6.06%

Comodo Security

UnclassifiedMalware

6.06%

G Data

Win32.Trojan.Agent.BY9TYF, Win32.Application.InstallCore.EG

6.06%

Vba32 AntiVirus

Trojan-Downloader.Autoit.gen

6.06%

ESET NOD32

Win32/TrojanDownloader.Autoit.NLI (variant)

6.06%

The domain clping.com has been seen to resolve to the following 2 IP addresses.

184.168.221.76

ip-184-168-221-76.ip.secureserver.net

August 10, 2016

50.56.56.58

50-56-56-58.static.cloud-ips.com

January 24, 2014

File downloads found at URLs served by clping.com.

1 / 68 (Adware)

http://clping.com/.../?trk_id=36054889&sub=41-2176-dl4&gender=f&min_age=14&max_age=17&frontend=1 (setup.exe)

16 / 68 (PUP)

http://clping.com/.../?trk_id=36707949&sub=9-dl4&gender=&min_age=&max_age=&frontend=1 (setup.exe)

1 / 68 (Malware)

http://clping.com/.../?trk_id=34159347&sub=5-8618-dl1&gender=m&min_age=m41&max_age=45&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=36258541&sub=29-0942-dl1&gender=f&min_age=m26&max_age=30&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=34747569&sub=35-3371-dl4&gender=m&min_age=m31&max_age=35&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=35637933&sub=41-4466-dl1&gender=f&min_age=20&max_age=25&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34288958&sub=5-8618-dl1&gender=m&min_age=m41&max_age=45&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=35890212&sub=1-dl1&gender=&min_age=&max_age=&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34766513&sub=4-9483-dl1&gender=f&min_age=36&max_age=40&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=33899310&sub=33-8731-dl1&gender=f&min_age=18&max_age=19&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=36058520&sub=14-1889-dl1&gender=m&min_age=m20&max_age=25&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=35055193&sub=4-9144-dl4&gender=f&min_age=20&max_age=25&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34222711&sub=1-dl4&gender=&min_age=&max_age=&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34128377&sub=33-8892-dl4&gender=f&min_age=14&max_age=17&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=35396435&sub=29-8732-dl1&gender=m&min_age=m20&max_age=25&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=36756832&sub=6-0484-dl1&gender=f&min_age=20&max_age=25&frontend=3 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=35461144&sub=29-3963-dl4&gender=f&min_age=13&max_age=13&frontend=1 (setup.exe)

16 / 68 (PUP)

http://clping.com/.../?trk_id=33880045&sub=41-2838-dl1&gender=f&min_age=14&max_age=17&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34431668&sub=29-2577-dl4&gender=f&min_age=26&max_age=30&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34263290&sub=5-7495-dl4&gender=m&min_age=m31&max_age=35&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=35094643&sub=4-4903-dl4&gender=f&min_age=14&max_age=17&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=35859382&sub=35-2361-dl1&gender=f&min_age=m31&max_age=35&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34279607&sub=41-9675-dl4&gender=f&min_age=26&max_age=30&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34778903&sub=29-2557-dl4&gender=f&min_age=41&max_age=45&frontend=1 (setup.exe)

1 / 68 (PUP)

http://clping.com/.../?trk_id=34605050&sub=41-4466-dl4&gender=f&min_age=20&max_age=25&frontend=1 (setup.exe)

16 / 68 (PUP)

http://clping.com/.../?trk_id=36406614&sub=6-dl1&gender=&min_age=&max_age=&frontend=1 (setup.exe)

1 / 68 (Adware)

http://clping.com/.../?trk_id=35536496&sub=29-5537-dl1&gender=f&min_age=m31&max_age=35&frontend=1 (setup.exe)

16 / 68 (PUP)

http://clping.com/.../?trk_id=37139450&sub=4-4903-dl1&gender=f&min_age=14&max_age=17&frontend=1 (setup.exe)

16 / 68 (PUP)

http://clping.com/.../?trk_id=35312823&sub=8-2662-dl1&gender=f&min_age=26&max_age=30&frontend=1 (setup.exe)

6 / 68 (PUP)

http://clping.com/.../?trk_id=35121910&sub=5-dl2&gender=&min_age=&max_age=&frontend=2 (setup.exe)

Latest 30 of 40 download URLs

The following file have been seen to comunicate with clping.com in live environments.

TCP » 50.56.56.58:80

addon_cr.crx

Subdomains

May 26, 2016

February 23, 2015

January 24, 2014

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.