The domain v3securedownload.com registered by Whois Privacy Corp. was initially registered in April of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrant:
Whois Privacy Corp.
Registrar:
TLD REGISTRAR SOLUTIONS LTD
Server location:
Dublin City, Ireland (IE)
Create date:
Wednesday, April 29, 2015
Expires date:
Friday, April 29, 2016
Updated date:
Wednesday, April 29, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (76% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.SVANTRANS.f, PUP.Installer.EVROPLAST.CC, PUP.Installer.ShetefSolutionsConsulting1998.T, PUP.Bundler.Amonetize, Adware.Amonetize.Installer.Meta (M)
63.16%
Avira AntiVirus
ADWARE/Adware.Gen4, Adware/Amonetize.575680.17, TR/Crypt.XPACK.Gen, ADWARE/Adware.Gen2, ADWARE/Amonetize.Gen, ADWARE/Amonetize.Gen7
52.63%
Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen, Win32/Virus.Adware.8c5, HEUR/QVM18.1.Malware.Gen
47.37%
ESET NOD32
Win32/Amonetize.CH (variant), Win32/Amonetize.CK (variant), Win32/Amonetize.CS (variant), Win32/Amonetize.EA potentially unwanted (variant)
42.11%
Dr.Web
Trojan.Amonetize.341, Trojan.Adfltnet.71, Trojan.Amonetize.441, infected with Trojan.Amonetize.10283, infected with Trojan.Amonetize.10504
42.11%
AhnLab V3 Security
PUP/Win32.Amonetiz
36.84%
AVG
Generic, Adware Generic6.GJY, BundleApp
31.58%
McAfee
Artemis!C5074D107539, Artemis!FEB4191CFE9E, Artemis!33ED0636C5F7, Artemis!FACCF5D7B97E, Artemis!198E46B0C12D
26.32%
avast!
Win32:Vitro, Win32:Adware-gen [Adw], Win32:Amonetize-HE [PUP], Win32:Amonetize-HU [PUP], Win32:Amonetize-KC [PUP]
26.32%
Malwarebytes
PUP.Optional.Amonetize
26.32%
G Data
Win32.Virtob.Gen.12, Gen:Variant.Application.Bundler.AirInstaller, Win32.Application.Amonetize.AA, Gen:Heur.Kelios, Gen:Variant.Strictor.99561
26.32%
Fortinet FortiGate
W32/Virut.CE, Riskware/Amonetize
26.32%
Sophos
Generic PUA MP, Amonetize, Generic PUA GC, Generic PUA LF (PUA)
21.05%
Bkav FE
W32.HfsAutoA, HW32.Packed
21.05%
MicroWorld eScan
Win32.Virtob.Gen.12, Gen:Variant.Application.Bundler.AirInstaller.1, Gen:Heur.Kelios.1, Gen:Variant.Strictor.99561
21.05%
The domain v3securedownload.com has been seen to resolve to the following 3 IP addresses.
ns1.ibspark.com
May 16, 2016
File downloads found at URLs served by v3securedownload.com.
The following 142 files have been seen to comunicate with v3securedownload.com in live environments.
URL:
http://v3securedownload.com/
SSL certificate subject:
CN=sni46502.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
cloudflare-nginx