securelinkdownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain securelinkdownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Monday, February 06, 2012

Expires date:
Monday, February 06, 2017

Updated date:
Thursday, February 18, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.SIENSA.H, PUP.Installer.Kreapixel.M, PUP.Kreapixel.J, PUP.Installer.Kreapixel.FF, PUP.Kreapixel.M, PUP.Installer.Kreapixel.L, PUP.Kreapixel.3Mo.Installer (M), PUP.Kreapixel (M)
92.00%

Dr.Web
Adware.Downware.1020, Trojan.Crossrider.9, Trojan.Packed.194, Adware.InstallCore.95, Adware.Downware.1119, Trojan.DownLoader8.17029
48.00%

ESET NOD32
Win32/Toolbar.Babylon, Win32/InstallCore.AZ (variant), Win32/InstallCore (variant)
44.00%

VIPRE Antivirus
Iminent, Trojan.Win32.Generic, Threat.4728187
40.00%

IKARUS anti.virus
Trojan-Downloader.Win32.Genome, not-a-virus:WebToolbar.Win32.Toolbar, SoftwareBundler
40.00%

Trend Micro House Call
HV_TOOLBAR_CH160357.UVPA, TROJ_GEN.R0E6H07DA14, HV_TOOLBAR_CH16024C.UVPA, TROJ_GEN.R0CBC0OG913, TROJ_GEN.R0CBC0PFD13, TROJ_GEN.RC1H1E4
36.00%

Antiy Labs AVL
Worm[IM]/Win32.Sohanad, Trojan/Win32.Tgenic, Spyware[AdWare:not-a-virus]/Win32.Shopper, Trojan/Win32.Genome.gen
32.00%

CMC Antivirus
Trojan.Win32.Generic!O, Packed.Win32.InstallCore.1!O
24.00%

K7 AntiVirus
Unwanted-Program , Trojan
24.00%

McAfee
Artemis!DE91B0864623, Artemis!684B8B642CF7, RDN/Generic PUP.x!b2r, Artemis!582C8F2AC2DD, Artemis!35477339A47B
24.00%

McAfee Web Gateway
Artemis!DE91B0864623, Artemis!684B8B642CF7, RDN/Generic PUP.x!b2r, Artemis!582C8F2AC2DD, Artemis!35477339A47B
24.00%

Kingsoft AntiVirus
Win32.Troj.Agent.zz.(kcloud), Win32.Troj.Toolbar.(kcloud), Win32.Troj.Generic.v.(kcloud), Win32.TrojDownloader.Genome.dk.(kcloud)
24.00%

F-Prot
W32/Undefined.Threat, W32/InstallCore.W.gen, W32/InstallCore.I.gen
20.00%

Kaspersky
not-a-virus:WebToolbar.Win32.Toolbar, not-a-virus:AdWare.Win32.Agent
20.00%

Fortinet FortiGate
Riskware/Toolbar, W32/CLICKER.ACE!tr, W32/Toolbar_Babylon.D
20.00%

The domain securelinkdownload.com has been seen to resolve to the following 3 IP addresses.

ip-184-168-221-88.ip.secureserver.net
February 19, 2016

August 17, 2014

cluster015.ovh.net
December 26, 2013

File downloads found at URLs served by securelinkdownload.com.

8 / 68      (PUP)

2 / 68      (inconclusive)

1 / 68      (PUP)

 
Latest 30 of 30 download URLs

The following 37 files have been seen to comunicate with securelinkdownload.com in live environments.

 
Latest 20 of 41 files

URL:
http://securelinkdownload.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)