home

i.apps-for-free.net

Verti Technology Group, Inc.

Domain Information

The domain i.apps-for-free.net registered by Verti Technology Group, Inc. was initially registered in January of 2014 through Network Solutions, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
Network Solutions, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, January 6, 2014

Expires date:
Tuesday, January 6, 2015

Updated date:
Wednesday, January 22, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
apps-for-free.net

Whois:
1 apps-for-free.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.VertiTechnologyGroup.I, PUP.VertiTechnologyGroup.d, PUP.VertiTechnologyGroup.Y, PUP.VertiTechnologyGroup.H, PUP.UsefulSoftware.F
100.00%

VIPRE Antivirus
Rocketfuel Installer
100.00%

ESET NOD32
Win32/Verti (variant)
100.00%

Trend Micro House Call
TROJ_GEN.F47V0110, ADW_VERTI, TROJ_GEN.F47V0227, TROJ_GEN.F47V0426, TROJ_GEN.F47V0301, TROJ_GEN.F47V0425, TROJ_GEN.F47V0513
83.33%

Fortinet FortiGate
PossibleThreat.SB!tr.dldr, Riskware/Verti
72.22%

Dr.Web
Adware.Downware.2070, Adware.Downware.2712, Adware.Downware.4150
66.67%

McAfee
Artemis!07DC8B119C49, Artemis!3B2DD686F757, Artemis!05B5B7B6437E, Artemis!C432D8C775AE, Artemis!136AC13E7FC6, Artemis!2B57D3B52823, Artemis!39C6A445194B, Artemis!36E980FE7C7B, Artemis!A24B425B1910, Artemis!C1847D539EC4
61.11%

Agnitum Outpost
Riskware.Agent
61.11%

AVG
MalSign.Generic, Usefus
61.11%

avast!
Win32:Adware-BGF [PUP]
33.33%

Malwarebytes
PUP.Optional.RocketFuel.A
27.78%

herdProtect (fuzzy)
a variant of a1fa43d9d3c98c592b1e69a786466c47e8d77b46, a variant of 1d4682217a888f1a3711817ab908a5aff03a2d42, a variant of 825c9673c1ea2190dab2895474109cdef70e1450
22.22%

XVirus List
Win.Detected
11.11%

Trend Micro
ADW_VERTI
5.56%

Emsisoft Anti-Malware
Adware.Win32.Verti
5.56%

The domain i.apps-for-free.net has been seen to resolve to the following 43 IP addresses.

54.230.192.230
server-54-230-192-230.iad53.r.cloudfront.net
December 11, 2014

54.239.152.188
server-54-239-152-188.iad53.r.cloudfront.net
December 11, 2014

54.239.152.91
server-54-239-152-91.iad53.r.cloudfront.net
December 11, 2014

54.230.195.230
server-54-230-195-230.iad53.r.cloudfront.net
December 11, 2014

54.230.195.35
server-54-230-195-35.iad53.r.cloudfront.net
December 11, 2014

54.230.18.13
server-54-230-18-13.iad12.r.cloudfront.net
September 5, 2014

54.230.16.138
server-54-230-16-138.iad12.r.cloudfront.net
September 5, 2014

54.240.160.94
server-54-240-160-94.iad12.r.cloudfront.net
September 5, 2014

54.240.160.23
server-54-240-160-23.iad12.r.cloudfront.net
September 5, 2014

54.230.19.242
server-54-230-19-242.iad12.r.cloudfront.net
September 5, 2014

54.230.19.34
server-54-230-19-34.iad12.r.cloudfront.net
September 5, 2014

54.230.18.188
server-54-230-18-188.iad12.r.cloudfront.net
September 5, 2014

54.230.18.22
server-54-230-18-22.iad12.r.cloudfront.net
September 5, 2014

54.230.100.111
server-54-230-100-111.iad2.r.cloudfront.net
September 5, 2014

54.230.100.71
server-54-230-100-71.iad2.r.cloudfront.net
September 5, 2014

216.137.33.201
server-216-137-33-201.iad2.r.cloudfront.net
September 5, 2014

54.230.103.248
server-54-230-103-248.iad2.r.cloudfront.net
September 5, 2014

54.230.103.191
server-54-230-103-191.iad2.r.cloudfront.net
September 5, 2014

54.230.102.45
server-54-230-102-45.iad2.r.cloudfront.net
September 5, 2014

54.230.101.220
server-54-230-101-220.iad2.r.cloudfront.net
September 5, 2014

54.230.103.81
server-54-230-103-81.iad2.r.cloudfront.net
September 3, 2014

54.230.102.251
server-54-230-102-251.iad2.r.cloudfront.net
September 3, 2014

54.230.102.131
server-54-230-102-131.iad2.r.cloudfront.net
September 3, 2014

54.230.101.9
server-54-230-101-9.iad2.r.cloudfront.net
September 3, 2014

54.230.100.169
server-54-230-100-169.iad2.r.cloudfront.net
September 3, 2014

54.230.103.136
server-54-230-103-136.iad2.r.cloudfront.net
September 3, 2014

54.230.103.93
server-54-230-103-93.iad2.r.cloudfront.net
September 3, 2014

54.230.101.250
server-54-230-101-250.iad2.r.cloudfront.net
September 3, 2014

54.230.101.244
server-54-230-101-244.iad2.r.cloudfront.net
September 3, 2014

54.230.101.127
server-54-230-101-127.iad2.r.cloudfront.net
September 3, 2014

 
Showing 30 of 43 IP Addresses

File downloads found at URLs served by i.apps-for-free.net.

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../Flv2PC.exe  (36e980fe7c7bff1ebe2748f01363c53d)

9 / 68      (Adware)
http://i.apps-for-free.net/stub/.../MasterGamer.exe  (ffd2e8aa78ed84a694ad2e93021e1df2)

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../TinyMediaPlayer.exe  (c1847d539ec410b67fa203e16f1ebb72)

5 / 68      (Adware)
http://i.apps-for-free.net/stub/.../7zip.exe  (39c6a445194bba7cc67a215ff7e8190b)

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../PricePeep.exe  (a24b425b1910153b399bcffdd57448b8)

5 / 68      (Adware)
http://i.apps-for-free.net/stub/.../TinyMediaPlayer.exe  (f1a9c0f038257187f3f82ffd85f7db19)

6 / 68      (Adware)
http://i.apps-for-free.net/stub/.../7zip.exe  (2b57d3b52823987b27949b1f02e1159d)

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../7zip.exe  (136ac13e7fc6970d1596862b8f76a547)

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../Xvid.exe  (51205651.exe)

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../TinyMediaPlayer.exe  (c8b889b824c91a159a0b1b59d2a80cca)

10 / 68    (Adware)
http://i.apps-for-free.net/stub/.../TinyMediaPlayer_RocketFuelInstaller.exe  (28bd253927f39ace9414d3d0d6a14f6b.exe)

13 / 68    (Adware)
http://i.apps-for-free.net/stub/.../7zip_RocketFuelInstaller.exe  (05b5b7b6437e15c0a9da7e532ddbe8f5)

10 / 68    (Adware)
http://i.apps-for-free.net/stub/.../Xvid_RocketFuelInstaller.exe  (2301223.exe)

7 / 68      (Adware)
http://i.apps-for-free.net/stub/.../7zip.exe  (75111b0aa0e6fe35b5e6b520f02f7400)

8 / 68      (Adware)
http://i.apps-for-free.net/stub/.../Xvid.exe  (36113.exe)

5 / 68      (Adware)
http://i.apps-for-free.net/stub/.../Xvid_RocketFuelInstaller.exe  (13154013.exe)

12 / 68    (Adware)
http://i.apps-for-free.net/stub/.../7zip_RocketFuelInstaller.exe  (3b2dd686f757c5495190d9260bf9b273)

11 / 68    (Adware)
http://i.apps-for-free.net/stub/.../TinyMediaPlayer_RocketFuelInstaller.exe  (54f23e16d11123b2dec1899ad9218466)

The following 114 files have been seen to comunicate with i.apps-for-free.net in live environments.

TCP » 23.67.250.113:80
dailywiki.exe

TCP » 23.67.243.72:443
couponmatcher_1.1.crx

TCP » 23.67.243.72:80
olmdfmecacbhbdgealggamhlglfmjbpa.crx

TCP » 23.67.243.72:80
afmjbhgpegkmhbockiombccdeehcoknj.crx

TCP » 23.67.243.72:80
hkmoaoegicodfdoihnjjibpfdlcodepf.crx

TCP » 23.67.243.72:80
ibokihboaojdolnlgbejebillmaodnfc.crx

TCP » 23.67.243.72:80
dgihlahjcobhicckdihcglcaolmmbgbn.crx

TCP » 23.67.243.72:80
afmjbhgpegkmhbockiombccdeehcoknj.crx

TCP » 23.67.243.72:80
fpnnogogihegcbpaodbnepofjfiepfcb.crx

TCP » 23.67.243.74:80
fdmaiibbjfpbfhdcljpomaaaclbjdmcg.crx

TCP » 23.67.243.74:80
dljdpmdnkpjdhfkjkcdacjdmpcbpojlc.crx

TCP » 23.67.243.74:80
mnchmgjekkgjikkffmbglijobonbmaan.crx

TCP » 23.67.243.74:80
bkhdmnkphakkjhahkddegalcnilmbdmn.crx

TCP » 23.67.243.74:80
blfhibbjlemchbkeakalepkbadfjlbgg.crx

TCP » 23.67.243.74:80
pmnnomhnpajkdgjpgffnphooamboiogk.crx

TCP » 23.67.243.74:80
jikhlipicfehaajalpggcnleligieome.crx

TCP » 23.67.243.74:80
pmnnomhnpajkdgjpgffnphooamboiogk.crx

TCP » 23.67.243.74:80
dljdpmdnkpjdhfkjkcdacjdmpcbpojlc.crx

TCP » 23.67.243.74:80
pmnnomhnpajkdgjpgffnphooamboiogk.crx

TCP » 23.67.243.74:80
kifafadhaonpfpdepdjmdmcgmnjieenj.crx

 
Latest 20 of 114 files

URL:
http://i.apps-for-free.net/

Network:
Amazon Cloudfront

Web server:
AmazonS3

Compete.com:
US visitors:  5,177

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.