home

secure.safedownloadables11.online

Domain Information

Server location:
California, United States (US)

ASN:
AS14061 DIGITALOCEAN-ASN - Digital Ocean, Inc., US

Root domain:
safedownloadables11.online

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.Download.Bundler (M), PUP.AirSoftware.Bundler.Installer.Meta (M)
100.00%

The domain secure.safedownloadables11.online has been seen to resolve to the following 2 IP addresses.

159.203.253.236
fd-04-do-w-sf-1.gtdlrfwd.com
August 22, 2016

159.203.107.180
fd-03-do-e-ny-3.gtdlrfwd.com
June 4, 2016

File downloads found at URLs served by secure.safedownloadables11.online.

1 / 68      (Adware)
http://secure.safedownloadables11.online/v2/click/91a98288/?affiliate_image=http://antivirus2016.co.uk/.../Avast_logo_noWordsSm.png&d=http://antivirus2016.co.uk/.../Avast2016.exe&filename=Avast_Setup&key=7d82d8c80e5df3f019de7afa740a6de6bb9821a28a4e7d481acaa8d0aa3894ce&n=Avast Antivirus Free&product_image=http://antivirus2016.co.uk/.../Avast_logo.png&sid=avast,uk,avast free download,ch&uao=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xOyBXT1c2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzUwLjAuMjY2MS4xMDIgU2FmYXJpLzUzNy4zNg__&scid=56ea797e-2447-11e6-95e5-0401abffae01  (avast_setup.exe)

1 / 68      (PUP)
http://secure.safedownloadables11.online/v2/click/9fa21c67/?d=http://alldownloadable.com/.../AVG_Free2015.exe&n=AVG Antivirus Free&key=d7f293ff5cba9fdb5cbe2337a06b712811e460629f3a2e8b2f2e6c9c8e64c88c&affiliate_image=http://alldownloadable.com/.../AVG_logo_noWords.png&product_image=http://alldownloadable.com/.../AVG_logo.png&filename=AVG_Setup&sid=2016_avgfree,avg free,FFIE  (avg_setup.exe)

1 / 68      (Adware)
http://secure.safedownloadables11.online/v2/click/fosyeuol/?d=http://antivirus2016.co.uk/.../Avast2016.exe&n=Avast Antivirus Free&key=7d82d8c80e5df3f019de7afa740a6de6bb9821a28a4e7d481acaa8d0aa3894ce&affiliate_image=http://antivirus2016.co.uk/.../Avast_logo_noWordsSm.png&product_image=http://antivirus2016.co.uk/.../Avast_logo.png&filename=Avast_Setup&sid=avast,uk,avast! free,FFIE  (avast_setup.exe)

1 / 68      (Adware)
http://secure.safedownloadables11.online/v2/click/9fa21c67/?d=http://alldownloadable.com/.../Avast2016.exe&n=Avast Antivirus Free&key=a30bcc3f3f864ab96443db9c6fe7baeeeb9a7e24f2025a0b1d4b7271c8c6fa9b&affiliate_image=http://alldownloadable.com/.../Avast_logo_noWordsSm.png&product_image=http://alldownloadable.com/.../Avast_logo.png&filename=Avast_Setup&sid=avast,avast antivirus free download 2016,FFIE  (avast_setup.exe)

1 / 68      (Adware)
http://secure.safedownloadables11.online/v2/click/fosyeuol/?d=http://antivirus2016.co.uk/.../Avast2016.exe&n=Avast Antivirus Free&key=7d82d8c80e5df3f019de7afa740a6de6bb9821a28a4e7d481acaa8d0aa3894ce&affiliate_image=http://antivirus2016.co.uk/.../Avast_logo_noWordsSm.png&product_image=http://antivirus2016.co.uk/.../Avast_logo.png&filename=Avast_Setup&sid=avast,uk,avast free download,FFIE  (avast_setup.exe)

The following 32 files have been seen to comunicate with secure.safedownloadables11.online in live environments.

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
setup_imgburn_2.5.8.0_download.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
kik for computer setup-efb5180a561c2ec1.exe

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
mpc-hc.1.7.10.x86_download.exe (Media Player Classic HomeCinema Edition by Software Assistant)

TCP » 159.203.253.236:80
setupimgburn_2.5.8.0_installer.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
microsoft toolkit-4f2c4058580128b8.exe

TCP » 159.203.253.236:80
setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 159.203.253.236:80
chrome setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (Minecraft by Software Assistant)

TCP » 159.203.253.236:80
n.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 159.203.253.236:80
setup.exe (FIFA 15 by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (Chrome by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (ImgBurn by Software Assistant)

TCP » 159.203.253.236:80
extreme injector.exe (Extreme Injector v3.6 by Software Assistant)

TCP » 159.203.253.236:80
the forest setup.exe (The Forest by Software Assistant)

TCP » 159.203.253.236:80
setup.exe (File Downloader by Software Assistant)

 
Latest 20 of 33 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.