home

getsecureweb.com

Creative Island Media, LLC  (via a Proxy Registrant)

Domain Information

The domain getsecureweb.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2013. This domain has been seen distributing various forms of adware (some being very aggressive) directly or via bundled installations. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below). The domain is associated with the publisher Creative Island Media, LLC who is located in San Diego, California in the United States.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, May 6, 2013

Expires date:
Tuesday, May 6, 2014

Updated date:
Tuesday, May 21, 2013

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Whois:
1 getsecureweb.com record

The domain getsecureweb.com has been seen to resolve to the following 15 IP addresses.

54.230.36.234
server-54-230-36-234.jfk1.r.cloudfront.net
January 15, 2014

54.230.39.102
server-54-230-39-102.jfk1.r.cloudfront.net
January 15, 2014

54.230.38.236
server-54-230-38-236.jfk1.r.cloudfront.net
January 15, 2014

204.246.169.180
server-204-246-169-180.jfk1.r.cloudfront.net
January 15, 2014

204.246.169.231
server-204-246-169-231.jfk1.r.cloudfront.net
January 15, 2014

204.246.169.10
January 15, 2014

54.230.37.161
server-54-230-37-161.jfk1.r.cloudfront.net
January 15, 2014

54.230.38.50
server-54-230-38-50.jfk1.r.cloudfront.net
January 15, 2014

54.230.37.214
server-54-230-37-214.jfk1.r.cloudfront.net
January 15, 2014

54.230.39.91
server-54-230-39-91.jfk1.r.cloudfront.net
January 15, 2014

204.246.169.6
server-204-246-169-6.jfk1.r.cloudfront.net
January 15, 2014

54.230.37.155
server-54-230-37-155.jfk1.r.cloudfront.net
January 15, 2014

204.246.169.197
server-204-246-169-197.jfk1.r.cloudfront.net
January 15, 2014

54.230.37.96
server-54-230-37-96.jfk1.r.cloudfront.net
January 15, 2014

54.230.37.93
server-54-230-37-93.jfk1.r.cloudfront.net
January 15, 2014

The following 17 files have been seen to comunicate with getsecureweb.com in live environments.

TCP » 54.230.37.96:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.37.93:443
apptrailers.exe

TCP » 54.230.37.93:443
whatsapptime.exe

TCP » 54.230.37.96:443
clearscreenplayerbrowser.exe

TCP » 54.230.37.93:80
dailywiki.exe

TCP » 54.230.37.96:80
coolwords155.exe

TCP » 54.230.37.155:443
Client.exe

TCP » 54.230.37.155:80
Client.exe

TCP » 54.230.37.214:443
browser.exe (Browser)

TCP » 54.230.37.155:80
browser.exe (Browser)

TCP » 54.230.37.214:443
catwsprx.exe (CatWSPrx.exe by Catalytix Web Services)

TCP » 54.230.37.96:80
browser.exe (Browser)

TCP » 54.230.37.155:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.37.214:80
browser.exe (Browser)

TCP » 204.246.169.10:80
secureassist.exe (SecureAssist.exe by SecureAssist)

TCP » 204.246.169.180:80
ContentExplorer.exe (ContentExplorer)

TCP » 204.246.169.197:80
secureassist.exe (SecureAssist.exe by SecureAssist)

TCP » 54.230.37.155:80
Gruvvin.exe (Gruvvin by Motion Apps)

TCP » 54.230.37.93:443
online-guardian-v2.0.9.exe

TCP » 54.230.37.96:443
online-guardian-v2.0.9.exe

 
Latest 20 of 27 files

URL:
http://getsecureweb.com/

Google Analytics:
UA-41107652

Title:
“Secure Web: The Best Free Web Monitoring App”

Description:
“Secure Web - The Best Free Web Monitoring App.”

Network:
Amazon Cloudfront

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

Alexa:
Global rank:  5,344,703

Compete.com:
US visitors:  22,972

Quantcast US:
Rank:  671,641

Statistics above are for the previous month of March 2024.

tubedimmerapp.com

websteroidsapp.com

betterxperience.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.