The domain securelinkdownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Arizona, United States (US)
Create date:
Monday, February 6, 2012
Expires date:
Monday, February 6, 2017
Updated date:
Thursday, February 18, 2016
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
Scanner detections:
Detections (88% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.SIENSA.H, PUP.Installer.Kreapixel.M, PUP.Kreapixel.J, PUP.Installer.Kreapixel.FF, PUP.Kreapixel.M, PUP.Installer.Kreapixel.L, PUP.Kreapixel.3Mo.Installer (M), PUP.Kreapixel (M)
92.00%
Dr.Web
Adware.Downware.1020, Trojan.Crossrider.9, Trojan.Packed.194, Adware.InstallCore.95, Adware.Downware.1119, Trojan.DownLoader8.17029
48.00%
ESET NOD32
Win32/Toolbar.Babylon, Win32/InstallCore.AZ (variant), Win32/InstallCore (variant)
44.00%
VIPRE Antivirus
Iminent, Trojan.Win32.Generic, Threat.4728187
40.00%
IKARUS anti.virus
Trojan-Downloader.Win32.Genome, not-a-virus:WebToolbar.Win32.Toolbar, SoftwareBundler
40.00%
Trend Micro House Call
HV_TOOLBAR_CH160357.UVPA, TROJ_GEN.R0E6H07DA14, HV_TOOLBAR_CH16024C.UVPA, TROJ_GEN.R0CBC0OG913, TROJ_GEN.R0CBC0PFD13, TROJ_GEN.RC1H1E4
36.00%
K7 AntiVirus
Unwanted-Program , Trojan
24.00%
McAfee
Artemis!DE91B0864623, Artemis!684B8B642CF7, RDN/Generic PUP.x!b2r, Artemis!582C8F2AC2DD, Artemis!35477339A47B
24.00%
F-Prot
W32/Undefined.Threat, W32/InstallCore.W.gen, W32/InstallCore.I.gen
20.00%
Kaspersky
not-a-virus:WebToolbar.Win32.Toolbar, not-a-virus:AdWare.Win32.Agent
20.00%
Fortinet FortiGate
Riskware/Toolbar, W32/CLICKER.ACE!tr, W32/Toolbar_Babylon.D
20.00%
G Data
Win32.Application.KreaPixWebplayer, Adware.Generic.472904
16.00%
Avira AntiVirus
ADWARE/InstallCore.Gen
16.00%
Microsoft Security Essentials
SoftwareBundler:Win32/DealPly
16.00%
Sophos
Generic PUA HO, Kreapixel, Install Core Click run software, Generic PUA FL
16.00%
The domain securelinkdownload.com has been seen to resolve to the following 3 IP addresses.
ip-184-168-221-88.ip.secureserver.net
February 19, 2016
cluster015.ovh.net
December 26, 2013
File downloads found at URLs served by securelinkdownload.com.
Latest 30 of 30 download URLs
The following 37 files have been seen to comunicate with securelinkdownload.com in live environments.
URL:
http://securelinkdownload.com/
Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)