www.clipskeeper.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.clipskeeper.com is registered by proxy through ENOM, INC. and was originally registered in November of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Friday, November 23, 2012

Expires date:
Wednesday, November 23, 2016

Updated date:
Saturday, December 19, 2015

ASN:
AS39572 ADVANCEDHOSTERS-AS ADVANCEDHOSTERS LIMITED

Root domain:

Scanner detections:
Detections  (56% detected)

Scan engine
Details
Detections

avast!
Win32:Amonetize-N [PUP], Win32:Amonetize-AF [PUP], Win32:Malware-gen, NSIS:Adware-HY [PUP], NSIS:InstMonetizer-AH [PUP]
62.50%

Malwarebytes
PUP.Optional.Amonetize.A, PUP.Optional.Handy.A
37.50%

ESET NOD32
Win32/Amonetize.AI (variant), Win32/Amonetize.AJ (variant), Win32/ActiveMonetizer
37.50%

Trend Micro House Call
TROJ_GEN.F47V0330, TROJ_GEN.R021H07C514, TROJ_GEN.R00UH06JV13
37.50%

Dr.Web
Adware.Downware.2250, Adware.Downware.1531
25.00%

Avira AntiVirus
ADWARE/Adware.Gen2
25.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.Yotoon
25.00%

McAfee
Artemis!71DE0C643658, RDN/Generic.tfr!dq
25.00%

AhnLab V3 Security
PUP/Win32.Amonetiz
12.50%

Agnitum Outpost
PUA.Amonetize
12.50%

Sophos
Amonetize
12.50%

Fortinet FortiGate
Riskware/Amonetize
12.50%

Qihoo 360 Security
Win32/Virus.Adware.932
12.50%

Reason Heuristics
Threat.Win.Reputation.IMP
12.50%

Microsoft Security Essentials
SoftwareBundler:Win32/Cakeport
12.50%

The domain www.clipskeeper.com has been seen to resolve to the following IP address.

March 27, 2014

File downloads found at URLs served by www.clipskeeper.com.

0 / 68

0 / 68

0 / 68

5 / 68      (PUP)

2 / 68      (PUP)

10 / 68    (PUP)

2 / 68      (inconclusive)

11 / 68    (PUP)
http://www.clipskeeper.com/.../36990  (setup__6789_il632.exe)

6 / 68      (PUP)
http://www.clipskeeper.com/.../36990  (gotclipdownloader__6629_i460594267_il133.exe)

URL:
http://www.clipskeeper.com/

Google Analytics:
UA-23390261

Title:
“GotCLIP Downloader -”

Web server:
Apache/2.2.23 (Unix) PHP/5.2.17 (PHP/5.2.17)