Is softwarecdn.net safe?
https://softwarecdn.net/downloads/JCP_ENTREPRISE_da933e3a.exe
Coveragepartial0 of 5 applicable core capabilities
Malware host distributing flagged executables from a 38-day-old domain tracked by URLhaus.
This is a malware distribution site. The domain is 38 days old, hosts a flagged executable, and is tracked by URLhaus for distributing malicious files.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
The domain softwarecdn.net was registered only 38 days ago and serves a direct executable download that Kaspersky flagged as malware. URLhaus lists the same file path under the JAMESWT_WT threat actor, confirming active malware distribution. One of 92 engines flagged the file, two more marked it suspicious, and the page itself triggers a Cloudflare phishing block. No business registration exists and the domain has zero traffic ranking. These signals together establish clear malicious intent.
Page Content
The captured page shows a Cloudflare security interstitial warning of suspected phishing rather than the actual download content. The underlying URL points to an executable named JCP_ENTREPRISE_da933e3a.exe hosted under the /downloads/ path.
Infrastructure
The site runs on Cloudflare IP 104.21.13.245 with a clean abuse score and valid SSL issued by Google Trust Services. No redirects occur and the domain is not indexed by major traffic-ranking services.
Domain History
The domain was registered 38 days ago on 2026-06-16 through NICENIC INTERNATIONAL GROUP CO., LIMITED. WHOIS privacy protection is disabled, yet no business registration records were located in any jurisdiction.
Web Reputation
URLhaus (abuse.ch) actively tracks softwarecdn.net for malware distribution and associates multiple download paths with the JAMESWT_WT threat actor. Kaspersky flagged the executable as malware while Fortinet and alphaMountain.ai marked it as spam. No positive reviews or legitimate business mentions appear anywhere.
What this means for you
Do not download or execute any file from this domain. The combination of a brand-new domain, direct malware hosting, and active abuse-list tracking indicates this is a purpose-built malware distribution point.
Why the score is 22
Saved antivirus evidence is adverse but no longer fresh. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
3/ 92
detectionsSaved result
3 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 2
- Total
- 92
| Engine | Finding |
|---|---|
| KasperskyMalicious | malware |
| alphaMountain.aiSuspicious | spam |
| FortinetSuspicious | spam |
All 92 engine results
- Kaspersky - malware - Malicious
- alphaMountain.ai - spam - Suspicious
- Fortinet - spam - Suspicious
- 0xSI_f33d - unrated - Clean
- Abusix - clean - Clean
- Acronis - clean - Clean
- ADMINUSLabs - clean - Clean
- AILabs (MONITORAPP) - clean - Clean
- AlienVault - clean - Clean
- AlphaSOC - unrated - Clean
- Antiy-AVL - clean - Clean
- ArcSight Threat Intelligence - unrated - Clean
- AutoShun - unrated - Clean
- Bfore.Ai PreCrime - unrated - Clean
- BitDefender - clean - Clean
- Bkav - unrated - Clean
- BlockList - clean - Clean
- Blueliv - clean - Clean
- Certego - clean - Clean
- ChainPatrol - unrated - Clean
- Chong Lua Dao - unrated - Clean
- CINS Army - clean - Clean
- Cluster25 - unrated - Clean
- CRDF - clean - Clean
- Criminal IP - unrated - Clean
- CSIS Security Group - unrated - Clean
- CTX AI - clean - Clean
- Cyan - unrated - Clean
- Cyble - clean - Clean
- CyRadar - clean - Clean
- desenmascara.me - clean - Clean
- DNS8 - unrated - Clean
- Dr.Web - clean - Clean
- EmergingThreats - clean - Clean
- Emsisoft - clean - Clean
- Ermes - unrated - Clean
- ESET - clean - Clean
- ESTsecurity - clean - Clean
- Forcepoint ThreatSeeker - clean - Clean
- Fortra - unrated - Clean
- G-Data - clean - Clean
- GCP Abuse Intelligence - unrated - Clean
- Google Safe Browsing - clean - Clean
- GreenSnow - clean - Clean
- GreyNoise - unrated - Clean
- Gridinsoft - unrated - Clean
- Guardpot - unrated - Clean
- Heimdal Security - clean - Clean
- Hunt.io Intelligence - unrated - Clean
- IPsum - clean - Clean
- Juniper Networks - clean - Clean
- K7AntiVirus - unrated - Clean
- LevelBlue - clean - Clean
- Lionic - clean - Clean
- Lumu - unrated - Clean
- Malwared - clean - Clean
- MalwarePatrol - clean - Clean
- MalwareURL - unrated - Clean
- Mimecast - unrated - Clean
- Netcraft - unrated - Clean
- OpenPhish - clean - Clean
- PhishFort - unrated - Clean
- Phishing Database - clean - Clean
- Phishtank - clean - Clean
- PREBYTES - clean - Clean
- PrecisionSec - unrated - Clean
- Quick Heal - clean - Clean
- Quttera - clean - Clean
- Rising - clean - Clean
- SafeToOpen - unrated - Clean
- Sangfor - clean - Clean
- Sansec eComscan - unrated - Clean
- Scantitan - clean - Clean
- SCUMWARE.org - clean - Clean
- Seclookup - clean - Clean
- Snort IP sample list - unrated - Clean
- SOCRadar - unrated - Clean
- Sophos - clean - Clean
- StopForumSpam - clean - Clean
- Sucuri SiteCheck - clean - Clean
- ThreatHive - clean - Clean
- URLhaus - clean - Clean
- URLQuery - unrated - Clean
- Viettel Threat Intelligence - clean - Clean
- VIPRE - unrated - Clean
- ViriBack - clean - Clean
- VX Vault - clean - Clean
- Webroot - clean - Clean
- Xcitium Verdict Cloud - clean - Clean
- Yandex Safebrowsing - clean - Clean
- ZeroCERT - clean - Clean
- ZeroFox - unrated - Clean
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual warning signs were identified
The screenshot shows a security warning page from Cloudflare indicating the site has been flagged for phishing; therefore, the actual content of the site is not visible for analysis.
What the captured page showed
2 observations- 01
Screenshot displays a Cloudflare security interstitial warning of suspected phishing
- 02
Page is an intermediary security block rather than the target website content
03 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainsoftwarecdn.net
- Redirects tosoftwarecdn.net
- Hosted byCloudflare, Inc.
Domain Timeline
- Jun 16, 2026Domain registered
First appeared in WHOIS records — 38 days old today.
- Jul 24, 2026Saved security review — Flagged as suspicious
The completed checks from this saved scan are detailed above.
softwarecdn.net was registered very recently and is already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Domain & Encryption
Server Reputation
04 · Evidence Ledger
Evidence ledger
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding |
|---|---|---|---|
| Antivirus | 3 of 92 engines flagged | Completed | Adverse |
| Browser protection | No browser threat-list match | Completed | No adverse finding |
| Page content | Page content was not available for semantic review | Completed | No saved finding |
| Visual evidence | 2 visible observations saved with the page capture | Completed | Adverse |
| Independent research | Independent research was not available for this report | Unavailable | Adverse |
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Page content
- ResultPage content was not available for semantic review
- CompletionCompleted
- FindingNo saved finding
- FreshnessNot available
- Visual evidence
- Result2 visible observations saved with the page capture
- CompletionCompleted
- FindingAdverse
- FreshnessNot available
- Independent research
- ResultIndependent research was not available for this report
- CompletionUnavailable
- FindingAdverse
- FreshnessNot available
06 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is softwarecdn.net a scam or a legit website?
Is softwarecdn.net safe to use?
I already paid or entered my details on softwarecdn.net — what should I do?
Can I get my money back from softwarecdn.net?
Is my device at risk after visiting softwarecdn.net?
How do I report softwarecdn.net?
softwarecdn.net looks professional — how can it still be a scam?
Has softwarecdn.net been flagged by antivirus engines?
Is softwarecdn.net on any phishing or malware blacklists?
How old is the softwarecdn.net domain?
Does softwarecdn.net have a valid SSL certificate?
How often is the softwarecdn.net report updated?
07 · Final Verdict
Final verdict
Malware host distributing flagged executables from a 38-day-old domain tracked by URLhaus.
This is a malware distribution site. The domain is 38 days old, hosts a flagged executable, and is tracked by URLhaus for distributing malicious files.
08 · Community
