The domain d.exfriendalert.com is registered by proxy through GODADDY.COM, LLC and was originally registered in November of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Arizona, United States (US)
Create date:
Saturday, November 17, 2012
Expires date:
Thursday, November 17, 2016
Updated date:
Wednesday, November 18, 2015
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.CloudCanvas.F, PUP.Installer.GenTechnologiesApps.F, PUP.CloudCanvas.Installer (M), PUP.Bundlore.Bundler (M)
100.00%
Comodo Security
Heur.Suspicious
56.25%
Dr.Web
Adware.Plugin.36, Threat.Undefined, Adware.Yontoo.55
50.00%
Trend Micro House Call
TROJ_GEN.F47V0725, TROJ_GEN.F47V0205, TROJ_GEN.F47V0726, TROJ_GEN.F47V0925, TROJ_GE.3630F48E, TROJ_GEN.F47V0329
37.50%
ESET NOD32
Win32/InstallMonetizer.AN, Win32/ExFriendAlert
37.50%
VIPRE Antivirus
Conduit, Threat.4784449, Threat.4150696
25.00%
avast!
Win32:BHO-AMO [PUP]
18.75%
McAfee
Artemis!3BDE17284F11, Artemis!93B26FE36BB8
12.50%
Malwarebytes
PUP.Optional.ExFriendAlert.A
12.50%
ESET NOD32
Win32/ExFriendAlert.B potentially unwanted application, Win32/ExFriendAlert.A potentially unwanted application
12.50%
K7 AntiVirus
Unwanted-Program , Trojan
12.50%
IKARUS anti.virus
AdWare.Win32.ExFriendAlert, PUA.ExFriendAlert
12.50%
Bkav FE
W32.Clode71.Trojan
6.25%
Panda Antivirus
PUP/Conduit.A
6.25%
NANO AntiVirus
Trojan.Win32.ExFriendAlert.deiobm
6.25%
The domain d.exfriendalert.com has been seen to resolve to the following IP address.
ip-184-168-221-72.ip.secureserver.net
April 14, 2014
File downloads found at URLs served by d.exfriendalert.com.
The following 6 files have been seen to comunicate with d.exfriendalert.com in live environments.
URL:
http://d.exfriendalert.com/
Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)
Related Domains