splendidsoft.net

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain splendidsoft.net is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Wednesday, August 20, 2014

Expires date:
Thursday, August 20, 2015

Updated date:
Wednesday, August 20, 2014

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.InformationTechnologySystemsdoo.R, PUP.installCore.InformationTechnologySystems.Installer (M), PUP.Coinis.installCore.Installer (M), PUP.installCore.Informat.Installer (M), PUP.installCore.OOOGross.Installer (M), PUP.Coinis (M), PUP.installCore (M)
100.00%

Dr.Web
Trojan.MulDrop5.38104
15.79%

VIPRE Antivirus
Threat.5063361
15.79%

Malwarebytes
Trojan.Downloader
15.79%

K7 AntiVirus
Unwanted-Program
15.79%

Sophos
Install Core Click run software, PUA 'Install Core Click run software'
15.79%

Avira AntiVirus
Adware/InstallCore.QK, ADWARE/InstallCore.Gen9
15.79%

AVG
Generic
15.79%

ESET NOD32
Win32/InstallCore.UE potentially unwanted application, Win32/InstallCore.UQ potentially unwanted application
10.53%

NANO AntiVirus
Riskware.Win32.InstallCore.djeevr
10.53%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
10.53%

ESET NOD32
Win32/InstallCore.QK (variant)
5.26%

Agnitum Outpost
PUA.InstallCore
5.26%

The domain splendidsoft.net has been seen to resolve to the following 2 IP addresses.

ip-184-168-221-48.ip.secureserver.net
January 6, 2015

September 7, 2014

File downloads found at URLs served by splendidsoft.net.

The following 11 files have been seen to comunicate with splendidsoft.net in live environments.

URL:
http://splendidsoft.net/

Title:
“Splendid Soft - Free Software Downloads”

Description:
“Download free software. Safe and 100% virus-free. Software downloads, tutorials, and much more. The website created to help you enjoy the best software.”

Web server:
nginx/1.2.1 (PHP/5.4.4-14+deb7u12)

30 of 30 related domains