l.gohss.co

ANCHORFREE

Domain Information

The domain l.gohss.co registered by ANCHORFREE was initially registered in April of 2015 through CCI REG S.A.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
CCI REG S.A.

Server location:
Virginia, United States (US)

Create date:
Tuesday, April 7, 2015

Expires date:
Thursday, April 6, 2017

Updated date:
Thursday, March 3, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.AnchorFree.Installer.Meta (L), PUP.HotspotShield.Installer.Meta (L), PUP.HotspotShield (L)
100.00%

The domain l.gohss.co has been seen to resolve to the following 90 IP addresses.

server-52-84-127-62.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-49.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-36.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-238.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-229.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-163.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-99.iad16.r.cloudfront.net
September 5, 2016

server-52-84-127-152.iad16.r.cloudfront.net
August 17, 2016

server-52-84-127-101.iad16.r.cloudfront.net
August 17, 2016

server-52-84-127-69.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-57.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-30.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-29.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-207.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-165.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-111.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-87.iad16.r.cloudfront.net
August 16, 2016

server-52-84-127-180.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-164.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-155.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-108.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-79.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-32.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-239.iad16.r.cloudfront.net
August 8, 2016

server-52-84-127-203.iad16.r.cloudfront.net
August 8, 2016

server-54-230-194-147.iad53.r.cloudfront.net
July 27, 2016

server-54-230-194-131.iad53.r.cloudfront.net
July 27, 2016

server-54-230-194-129.iad53.r.cloudfront.net
July 27, 2016

server-54-230-194-116.iad53.r.cloudfront.net
July 27, 2016

server-54-230-194-104.iad53.r.cloudfront.net
July 27, 2016

 
Showing 30 of 90 IP Addresses

File downloads found at URLs served by l.gohss.co.

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

0 / 68
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

0 / 68
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

1 / 68      (PUP)
http://l.gohss.co/welcome-windows  (hss-5.1.5-install-plain-781-plain.exe)

The following 7 files have been seen to comunicate with l.gohss.co in live environments.

URL:
http://l.gohss.co/

Google Analytics:
UA-246226

Title:
“Free VPN Service & Software Download | Hotspot Shield”

Description:
“Hotspot Shield's free VPN protects your privacy, unblocks websites & hides your IP so you can surf anonymously. Safely download our free VPN software here.”

Network:
Amazon Cloudfront

Web server:
AmazonS3