app4ever.freecheckupdates.net

PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain app4ever.freecheckupdates.net is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the SingleHop, Inc. network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Illinois, United States (US)

Create date:
Thursday, February 12, 2015

Expires date:
Friday, February 12, 2016

Updated date:
Friday, February 13, 2015

ASN:
AS32475 SINGLEHOP-INC - SingleHop,US

Google Safe Browsing:
phishing

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Win.Reputation, PUP.Installer.OOONextStarsGroup, PUP.Bundler.InstallCore
100.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
100.00%

herdProtect (fuzzy)
a variant of 51f16b0a2d68cd96e8de0acfb13ddee983efcee6, a variant of 46b7b1bd2033794816bb9e46319814c8ed0945fa
100.00%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application
66.67%

Baidu Antivirus
Adware.Win32.Agent, Adware.Win32.InstallCore
66.67%

avast!
Trojan-gen, Malware-gen
66.67%

K7 AntiVirus
Adware
66.67%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted (variant)
33.33%

Avira AntiVirus
W32/Sality.AT
33.33%

AVG
Win.Threat.Medium
33.33%

Trend Micro House Call
Suspicious_GEN.F47V0424
33.33%

McAfee
Artemis!CB9DC611717B
33.33%

Fortinet FortiGate
Riskware/InstallCore
33.33%

The domain app4ever.freecheckupdates.net has been seen to resolve to the following IP address.

usdedi2.cipo.me
May 6, 2015

File downloads found at URLs served by app4ever.freecheckupdates.net.

URL:
http://app4ever.freecheckupdates.net/

Web server:
nginx/1.4.6 (Ubuntu) (PHP/5.5.9-1ubuntu4.7)

30 of 31 related domains