home

safedriverdownloady.asia

safedriverdownloady.asia

Domain Information

The domain safedriverdownloady.asia registered by safedriverdownloady.asia was initially registered in April of 2013 through PDR Ltd. d/b/a PublicDomainRegistry.com R28-ASIA (303). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Redwood City, California within the United States which resides on the SKYE network.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com R28-ASIA (303)

Server location:
California, United States (US)

Create date:
Sunday, April 28, 2013

Expires date:
Tuesday, April 28, 2015

Updated date:
Tuesday, April 29, 2014

ASN:
AS26008 NOMINUM-SKYE1 - SKYE

Whois:
1 safedriverdownloady.asia record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer.c, Adware.WebPick.Installer (M)
100.00%

Bkav FE
HW32.CDB
66.67%

MicroWorld eScan
Application.Generic.591792, Trojan.Generic.9549828
66.67%

McAfee
PUP-FHQ!DD078F0A8F5C, PUP-FHQ!13921D944D6B
66.67%

Malwarebytes
PUP.Optional.Installex
66.67%

Agnitum Outpost
Adware.Generic
66.67%

avast!
Win32:InstalleRex-Q [PUP]
66.67%

Kaspersky
not-a-virus:AdWare.Win32.Agent
66.67%

Bitdefender
Application.Generic.591792, Trojan.Generic.9549828
66.67%

NANO AntiVirus
Riskware.Win32.Adware.crcapm, Riskware.Win32.Adware.crcapk
66.67%

SUPERAntiSpyware
PUP.InstallRex/Variant
66.67%

Lavasoft Ad-Aware
Application.Generic.591792, Trojan.Generic.9549828
66.67%

Comodo Security
Application.Win32.InstalleRex.KG
66.67%

F-Secure
Application.Generic.591792, Trojan.Generic.9549828
66.67%

Dr.Web
Adware.Downware.1166
66.67%

The domain safedriverdownloady.asia has been seen to resolve to the following IP address.

199.101.28.20
search.dnsassist.verizon.net
May 1, 2014

File downloads found at URLs served by safedriverdownloady.asia.

1 / 68      (Adware)
http://safedriverdownloady.asia/v343  (vaudix.exe)

40 / 68    (Adware)
http://safedriverdownloady.asia/v343  (vaudix.exe)

27 / 68    (Adware)
http://safedriverdownloady.asia/.../?product_name=Game of Thrones Season_3 Episode 7&installer_file_name=Game of Thrones Season_3 Episode 7&r=271  (game of thrones season_3 episode 7.exe)

The following 46 files have been seen to comunicate with safedriverdownloady.asia in live environments.

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
datapump.crx

 
Latest 20 of 46 files

URL:
http://safedriverdownloady.asia/

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.