dl.elex.soft365.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dl.elex.soft365.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2004. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Texas, United States (US)

Create date:
Saturday, July 24, 2004

Expires date:
Tuesday, July 24, 2018

Updated date:
Tuesday, April 28, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BanyanTreeTechnologyLimited.N, PUP.BanyanTreeTechnologyLimited.G, PUP.BanyanTreeTechnologyLimited.I, PUP.BeijingELEXTechnologyCoLtd.G, PUP.ELEX.BeijingELEXTechnology (M), PUP.BanyanTreeTechnology (M), PUP.BanyanTreeTechnology.Installer (M), PUP.BanyanTr.Installer (M), PUP.BanyanTr (M), PUP.ELEX.BeijingE (M), PUP (M), PUP.ELEX (M)
98.00%

ESET NOD32
Win32/ELEX (variant), Win32/ELEX.A.Gen, Win32/ELEX.C potentially unwanted (variant)
28.00%

avast!
Win32:Malware-gen, Win32:Adware-BEN [Adw], Win32:Adware-BEM [Adw], Win32:Evo-gen [Susp]
22.00%

IKARUS anti.virus
AdWare.Win32.ELEX, AdWare.Gen2, Win32.SuspectCrc, Trojan.Win32.Spy
22.00%

VIPRE Antivirus
Elex Installer
20.00%

AVG
MalSign.Generic
20.00%

G Data
Win32.Trojan.Agent.JZ3M1F, Win32.Adware.Elex, Win32.Trojan.Wysotot
18.00%

Emsisoft Anti-Malware
Trojan.Win32.ELEX.AMN, Trojan.Win32.ELEX.A.AMN, Gen:Variant.Symmi.31573
18.00%

McAfee
Artemis!9F28656AB0CE, Artemis!9B497B2A87E0, Artemis!8064799E791A, Artemis!374B51C74DA6
16.00%

Malwarebytes
PUP.Optional.Elex
16.00%

Trend Micro House Call
TROJ_GEN.F47V0724, TROJ_GEN.R002C0OI614, TROJ_GEN.F47V0710, TROJ_GEN.R047H08AG15, TROJ_GEN.F47V0722
16.00%

Dr.Web
Adware.Mutabaha.23, Adware.Mutabaha.255
16.00%

Bkav FE
W32.Clod2a1.Trojan, W32.HfsAdware
16.00%

Baidu Antivirus
Adware.Win32.ElexInstall, Trojan.Win32.StartPage
16.00%

Avira AntiVirus
ADWARE/Adware.Gen2
16.00%

The domain dl.elex.soft365.com has been seen to resolve to the following 2 IP addresses.

50.97.129.8-static.reverse.softlayer.com
January 8, 2014

184.173.70.134-static.reverse.softlayer.com
January 8, 2014

File downloads found at URLs served by dl.elex.soft365.com.

1 / 68      (Adware)

1 / 68      (PUP)
http://dl.elex.soft365.com/.../generator?short=nsk_55_elex  (nsk_microsoft_security_essentials4.1.522_2012-11-16_15.06.07.exe)

1 / 68      (Adware)

27 / 68    (Adware)
http://dl.elex.soft365.com/Public/dlexe/ads/.../YouTV.exe  (59386a9528b30e98ae3d2f6935cb86f9)

1 / 68      (Adware)

1 / 68      (PUP)

1 / 68      (Adware)

27 / 68    (Adware)

1 / 68      (Adware)

 
Latest 30 of 159 download URLs

The following 396 files have been seen to comunicate with dl.elex.soft365.com in live environments.

 
Latest 20 of 396 files

URL:
http://dl.elex.soft365.com/

Title:
“(ELEX) downloader generator”

Web server:
Apache/2.2.8 (Win32) PHP/5.2.6 (ThinkPHP)

Facebook:
Shares:  1

Statistics are for the previous month.