The domain polifile.co registered by BRSOFTWARELLC was initially registered in March of 2015 through NAMECHEAP, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
NAMECHEAP, INC.
Server location:
Virginia, United States (US)
Create date:
Tuesday, March 10, 2015
Expires date:
Wednesday, March 9, 2016
Updated date:
Friday, March 18, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Google Safe Browsing:
unwanted
Scanner detections:
Detections (87% detected)
Scan engine
Details
Detections
F-Prot
W32/Adware.ALMA (exact, not disinfectable), W32/NetFilter-PUA.B (exact, not disinfectable)
60.00%
McAfee
Program.PUP-RFTY, Trojan.PUP-RFTY, Trojan.Artemis!5B46443F5326, Trojan.Artemis!20E8B04D0D33, Trojan.Artemis!422966806A95
55.00%
Microsoft Security Essentials
Threat.Undefined, SoftwareBundler:Win32/Fourthrem
52.50%
Kaspersky
not-a-virus:NetTool.Win64.NetFilter
52.50%
ESET NOD32
multiple threats
50.00%
AVG
Adware Generic6.TGA, Adware Generic7.DHA, Adware Generic7.JFC
50.00%
Reason Heuristics
(M), PUP.Solimba.PrelasanDevelopments.Bundler (M), PUP.YuBao.Installer (M), PUP.TECHALPH.Installer (M), PUP (M)
42.50%
Emsisoft Anti-Malware
Adware.Agent.PPG, Dropped:Adware.Agent.PPG, Dropped:Application.Generic.1571680, Trojan.Generic.15339704, Gen:Trojan.Heur.KT.2.5v3@aerlmDli
37.50%
F-Secure
Riskware.Application.Generic.1487591, Trojan.Generic.15339704, Riskware.Application.Generic.1571680
35.00%
Dr.Web
infected with Trojan.Fraudster.1620, Detection.Undefined, Trojan.Fraudster.1624, Adware.Mutabaha.1061, Trojan.Fraudster.1960
32.50%
Norman
Adware.Agent.PPG, Trojan.Generic.15339704, Dropped:Adware.Agent.PPG, Dropped:Application.Generic.1571680
32.50%
VIPRE Antivirus
Threat.4150696, Threat.4734384, Trojan.Win32.Generic, Yontoo, Threat.5063666
30.00%
Sophos
Generic PUA DF (PUA), PUA 'NetFilter' (of type Adware), Generic PUA EB (PUA), Generic PUA BD (PUA)
15.00%
Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen, QVM42.0.Malware.Gen
12.50%
MicroWorld eScan
Dropped:Adware.Agent.PPG, Trojan.Generic.15339704, Dropped:Application.Generic.1571680
10.00%
The domain polifile.co has been seen to resolve to the following 7 IP addresses.
ec2-52-201-52-18.compute-1.amazonaws.com
April 14, 2016
ec2-52-20-13-20.compute-1.amazonaws.com
April 14, 2016
ec2-52-72-152-243.compute-1.amazonaws.com
April 12, 2016
ec2-52-7-128-246.compute-1.amazonaws.com
April 12, 2016
ec2-52-86-210-34.compute-1.amazonaws.com
April 5, 2016
ec2-52-3-127-100.compute-1.amazonaws.com
April 5, 2016
File downloads found at URLs served by polifile.co.
Subdomains
Google Analytics:
UA-12529737
Title:
“polifile.co - domain expired”
Network:
Amazon Web Services (AWS), running an EC2 instance
Related Domains