hitman-pro-antivirus.free-safe.com
WHOISGUARD, INC. (Proxy Registrant)
Domain Information
The domain hitman-pro-antivirus.free-safe.com is registered by proxy through ENOM, INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrant:
WHOISGUARD, INC.
Server location:
Utah, United States (US)
Create date:
Wednesday, April 30, 2014
Expires date:
Thursday, April 30, 2015
Updated date:
Monday, May 19, 2014
ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.QUALITYSCORESL.V, PUP.Installer.QUALITYSCORESL.U
100.00%
MicroWorld eScan
Application.Bundler.FY
50.00%
Bitdefender
Application.Bundler.FY
50.00%
Rising Antivirus
PE:Trojan.Win32.Generic.178A5D38!394943800
50.00%
Lavasoft Ad-Aware
Application.Bundler.FY
50.00%
F-Secure
Application.Bundler.FY
50.00%
Dr.Web
Adware.Colooader.4
50.00%
G Data
Application.Bundler.FY
50.00%
ESET NOD32
MSIL/Adware.Colooader
50.00%
IKARUS anti.virus
AdWare.MSIL.Colooader
50.00%
The domain hitman-pro-antivirus.free-safe.com has been seen to resolve to the following IP address.
162-144-91-108.unifiedlayer.com
August 19, 2014
File downloads found at URLs served by hitman-pro-antivirus.free-safe.com.
The following 2 files have been seen to comunicate with hitman-pro-antivirus.free-safe.com in live environments.
URL:
http://hitman-pro-antivirus.free-safe.com/
Title:
“Hitman Pro - Free Safe”
Description:
“A second opinion to your usual virus analysis.”
Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4 (PHP/5.4.26)
Related Domains
