cdn.soft-400.com
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain cdn.soft-400.com is registered by proxy through ENOM, INC. and was originally registered in January of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Sherman Oaks, California within the United States which resides on the Unitas Global LLC network.
Registrant:
WHOISGUARD, INC.
Server location:
California, United States (US)
Create date:
Wednesday, January 6, 2016
Expires date:
Friday, January 6, 2017
Updated date:
Wednesday, January 6, 2016
ASN:
AS17025 ABOVENET-CUSTOMER - Abovenet Communications, Inc,US
Scanner detections:
Detections (75% detected)
Scan engine
Details
Detections
McAfee
Artemis!52B30300D3DF, Artemis!AFE87ED50398, Artemis!5C23ADAB37FF
100.00%
VIPRE Antivirus
BubbleDock, Threat.4791953
100.00%
Dr.Web
Adware.Downware.5766, Adware.Downware.10519, Adware.Downware.9155
100.00%
ESET NOD32
Win32/BubbleDock, Win32/BubbleDock.A potentially unwanted
100.00%
AVG
MalSign.Generic
100.00%
Reason Heuristics
PUP.Installer.NOSIBAY.H, PUP.NOSIBAY.Installer (M)
100.00%
herdProtect (fuzzy)
a variant of 194a88409efce6bd7b3b3f37946a82bb3617512b, a variant of 25bb8f30a453504e14586428beba718818f27324, a variant of a1cb2806d21307f77da1a5f13cde7fea1bc4e84f
100.00%
Trend Micro House Call
TROJ_GEN.F47V0320, Suspicious_GEN.F47V0217, Suspicious_GEN.F47V0328
100.00%
K7 AntiVirus
Trojan
66.67%
Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
66.67%
Bkav FE
W32.HfsAdware
66.67%
Panda Antivirus
PUP/Nosibay
66.67%
Malwarebytes
PUP.Optional.BubbleDock.A
33.33%
AhnLab V3 Security
PUP/Win32.BubbleDock
33.33%
The domain cdn.soft-400.com has been seen to resolve to the following IP address.
32-125-232-198.static.unitasglobal.net
May 20, 2016
File downloads found at URLs served by cdn.soft-400.com.
The following 187 files have been seen to comunicate with cdn.soft-400.com in live environments.
URL:
http://cdn.soft-400.com/
Web server:
NetDNA-cache/2.2
