rhapsody-2014.free-safe.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain rhapsody-2014.free-safe.com is registered by proxy through ENOM, INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Wednesday, April 30, 2014

Expires date:
Thursday, April 30, 2015

Updated date:
Monday, May 19, 2014

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

IKARUS anti.virus
AdWare.MSIL.Colooader
100.00%

Reason Heuristics
PUP.Installer.QUALITYSCORESL.Q
100.00%

The domain rhapsody-2014.free-safe.com has been seen to resolve to the following IP address.

162-144-91-108.unifiedlayer.com
November 17, 2014

File downloads found at URLs served by rhapsody-2014.free-safe.com.

2 / 68      (Adware)

The following 2 files have been seen to comunicate with rhapsody-2014.free-safe.com in live environments.

URL:
http://rhapsody-2014.free-safe.com/

Title:
“Rhapsody - Free Safe”

Description:
“Best jukebox with multiple features to manage your music.”

Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4 (PHP/5.4.26)