home

safedownloadsrus111.com

REACTIVATION PERIOD

Domain Information

The domain safedownloadsrus111.com registered by REACTIVATION PERIOD was initially registered in November of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Thursday, November 27, 2014

Expires date:
Friday, November 27, 2015

Updated date:
Saturday, January 9, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
3 safedownloadsrus111.com records

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.F, PUP.Installer.InstallationSafe.F, PUP.AdGazelle.Bundler.Installer.Meta (M), PUP.InstallationSafe.Installer (M), PUP.IMALI.IMALINIMEDIATD.Installer (M), PUP.Installa.Installer (M), PUP.Softpulse.Softforc.Bundler (M), PUP.InstallCore.RE11 (M), PUP (M)
98.00%

Dr.Web
Program.Unwanted.79, Adware.Downware.9017, Adware.Downware.9463
20.00%

avast!
Win32:Adware-gen [Adw]
18.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Strictor.67719
18.00%

VIPRE Antivirus
Threat.5063330, Threat.5063253, AdGazelle
18.00%

Sophos
PUA 'InstallationSafe'
18.00%

MicroWorld eScan
Gen:Variant.Adware.Strictor.67719
18.00%

Zillya! Antivirus
Backdoor.PePatch.Win32.51352
18.00%

K7 AntiVirus
Unwanted-Program , Trojan
18.00%

Clam AntiVirus
Win.Trojan.11906039
18.00%

Bitdefender
Gen:Variant.Adware.Strictor.67719
18.00%

Agnitum Outpost
Riskware.Agent
18.00%

Avira AntiVirus
ADWARE/Adware.Gen2, TR/Dropper.Gen
18.00%

G Data
Gen:Variant.Adware.Strictor.67719
18.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.Strictor.67719
14.00%

The domain safedownloadsrus111.com has been seen to resolve to the following 2 IP addresses.

8.5.1.37
December 16, 2015

54.88.51.200
ec2-54-88-51-200.compute-1.amazonaws.com
May 3, 2015

File downloads found at URLs served by safedownloadsrus111.com.

1 / 68      (Adware)
http://safedownloadsrus111.com/Download?lpm_id=41  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../461?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/Download?lpm_id=81  (setup.exe)

1 / 68      (PUP)
http://safedownloadsrus111.com/download/.../451?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../669?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../756?lpm_id=41  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../778?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../569?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../577?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../110?lpm_id=41  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../402?lpm_id=41  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../566?lpm_id=24  (setup.exe)

1 / 68      (Adware)
http://safedownloadsrus111.com/download/.../490?lpm_id=24  (setup.exe)

3 / 68      (PUP)
http://safedownloadsrus111.com/download/.../660?lpm_id=41  (setup.exe)

The following file have been seen to comunicate with safedownloadsrus111.com in live environments.

TCP » 8.5.1.37:80
securedocumentsviewer.crx

Facebook:
Shares:  10

Statistics above are for the previous month of March 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.