songbird-download.free-safe.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain songbird-download.free-safe.com is registered by proxy through ENOM, INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Wednesday, April 30, 2014

Expires date:
Thursday, April 30, 2015

Updated date:
Monday, May 19, 2014

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Application.Bundler.FY
100.00%

Bitdefender
Application.Bundler.FY
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.178A5D38!394943800
100.00%

Lavasoft Ad-Aware
Application.Bundler.FY
100.00%

F-Secure
Application.Bundler.FY
100.00%

Dr.Web
Adware.Colooader.4
100.00%

G Data
Application.Bundler.FY
100.00%

ESET NOD32
MSIL/Adware.Colooader
100.00%

IKARUS anti.virus
AdWare.MSIL.Colooader
100.00%

Reason Heuristics
PUP.Installer.QUALITYSCORESL.U
100.00%

The domain songbird-download.free-safe.com has been seen to resolve to the following IP address.

162-144-91-108.unifiedlayer.com
November 2, 2014

File downloads found at URLs served by songbird-download.free-safe.com.

10 / 68    (Adware)

The following 2 files have been seen to comunicate with songbird-download.free-safe.com in live environments.

URL:
http://songbird-download.free-safe.com/

Title:
“Songbird - Free Safe”

Description:
“Songbird is easy, simple and safe. Keep your music organized and updated.”

Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4 (PHP/5.4.26)