s.vsafesw.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain s.vsafesw.com is registered by proxy through Network Solutions, LLC and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
Network Solutions, LLC

Server location:
Massachusetts, United States (US)

Create date:
Wednesday, May 28, 2014

Expires date:
Thursday, May 28, 2015

Updated date:
Monday, June 2, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Rollnon.I, PUP.Rollnon.G
100.00%

McAfee
Artemis!C96BD5645D12
100.00%

Malwarebytes
PUP.Optional.NextUp
100.00%

VIPRE Antivirus
Rocketfuel Installer, Ignition Installer
100.00%

K7 AntiVirus
Trojan
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0708
100.00%

Sophos
NextUp
100.00%

G Data
Win32.Application.Nextup
100.00%

Vba32 AntiVirus
AdWare.Agent
100.00%

ESET NOD32
Win32/Verti (variant)
100.00%

IKARUS anti.virus
PUA.Nextup
100.00%

The domain s.vsafesw.com has been seen to resolve to the following 2 IP addresses.

a23-67-251-58.deploy.static.akamaitechnologies.com
July 7, 2014

July 7, 2014

File downloads found at URLs served by s.vsafesw.com.

11 / 68    (Adware)
http://s.vsafesw.com/stub/.../Flappy.exe  (142d5d07259cb85c9b8dfb775eebe2a3)

11 / 68    (Adware)
http://s.vsafesw.com/stub/.../setup.exe  (20f3c5cb19c0f477ec2c088288be51cb)

The following 16 files have been seen to comunicate with s.vsafesw.com in live environments.

URL:
http://s.vsafesw.com/

Web server:
Apache