cdn.freeversions.ru

Private Person  (Proxy Registrant)

Domain Information

The domain cdn.freeversions.ru is registered by proxy through R01-RU and was originally registered in April of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Berlin, Berlin within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-RU

Server location:
Berlin, Germany (DE)

Create date:
Monday, April 22, 2013

Expires date:
Saturday, April 22, 2017

ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!64FE88A66670, Artemis!B53F3148B140, RDN/Generic PUP.z
100.00%

K7 AntiVirus
Adware
100.00%

Kaspersky
not-a-virus:HEUR:Downloader.NSIS.SoftBase, UDS:DangerousObject.Multi.Generic
100.00%

ESET NOD32
Win32/Softobase.C potentially unwanted, Win32/Softobase.D potentially unwanted
100.00%

Baidu Antivirus
PUA.Win32.Softobase
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
66.67%

Trend Micro House Call
TROJ_GEN.R02SH05E315, Suspicious_GEN.F47V0413
66.67%

Sophos
Generic PUA OG, Generic PUA MA (PUA)
66.67%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
66.67%

Norman
Suspicious_Gen4.IGOUZ
33.33%

avast!
Win32:Trojan-gen
33.33%

Trend Micro
TROJ_GEN.R02SC0OEG15
33.33%

Clam AntiVirus
Win.Trojan.Agent-906217
33.33%

NANO AntiVirus
Trojan.Nsis.SoftBase.dsycco
33.33%

AhnLab V3 Security
PUP/Win32.Softobase
33.33%

The domain cdn.freeversions.ru has been seen to resolve to the following IP address.

static.124.148.243.136.clients.your-server.de
July 17, 2016

File downloads found at URLs served by cdn.freeversions.ru.

12 / 68    (PUP)
http://cdn.freeversions.ru/Zona_Russian_Setup_Online.exe  (64fe88a666702a504b0cefd7655c93a7)

12 / 68    (PUP)

7 / 68      (PUP)
http://cdn.freeversions.ru/DjVuReader_Rus_Setup.exe  (b53f3148b14026bcadd8502ed12c4e71)

The following file have been seen to comunicate with cdn.freeversions.ru in live environments.

URL:
http://cdn.freeversions.ru/

Web server:
nginx/1.9.10