www.free-wifi-hotspot.com

HANG XUESONG

Domain Information

The domain www.free-wifi-hotspot.com registered by HANG XUESONG was initially registered in June of 2013 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Linode network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Monday, June 24, 2013

Expires date:
Friday, June 24, 2016

Updated date:
Monday, May 25, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.TechEvolveGMBH.P, PUP.Optional.Installer.P, PUP.Bundler.TsingsoftImaginationInformationTechnologyCo.Installer.Meta (L), Win32.Generic.TechEvolveGMBH.Installer.Meta
93.75%

ESET NOD32
Win32/OpenCandy, Win32/OpenCandy (variant), Win32/InstallCore.PZ (variant), Win32/InstallCore.PY (variant), Win32/InstallCore.QL (variant)
75.00%

Avira AntiVirus
ADWARE/InstallCore.Gen9, Adware/InstallCore.694088, ADWARE/InstallCore.Gen7, ADWARE/InstallCo.TR
50.00%

VIPRE Antivirus
InstallCore
43.75%

Malwarebytes
PUP.Optional.Downloader, PUP.Optional.Amonetize, PUP.Optional.InstallCore
37.50%

Sophos
Generic PUA DC, Generic PUA HN, Generic PUA PB, Generic PUA JP, Generic PUA BH, Generic PUA AA
37.50%

K7 AntiVirus
Trojan , Unwanted-Program
37.50%

Norman
InstallCore.CERT
37.50%

Fortinet FortiGate
Adware/OpenCandy, Riskware/InstallCore
31.25%

Trend Micro House Call
Suspicious_GEN.F47V0731, Suspicious_GEN.F47V0821, Suspicious_GEN.F47V1227, Suspicious_GEN.F47V0107, Suspicious_GEN.F47V1229
31.25%

McAfee
Artemis!95FC8C815812, Artemis!F64BA8A4D830, Artemis!1CDF79A1C72C, Artemis!DCF26172F980, Artemis!11766EEE82AC
31.25%

Comodo Security
ApplicUnwnt
31.25%

Baidu Antivirus
Adware.Win32.InstallCore
31.25%

Dr.Web
Trojan.InstallCore.11, Trojan.InstallCore.151
25.00%

NANO AntiVirus
Trojan.Win32.OpenCandy.cumjqq, Riskware.Win32.InstallCore.djeeso, Riskware.Win32.InstallCore.dmfooy
18.75%

The domain www.free-wifi-hotspot.com has been seen to resolve to the following 2 IP addresses.

li918-213.members.linode.com
December 15, 2015

li166-221.members.linode.com
February 6, 2014

File downloads found at URLs served by www.free-wifi-hotspot.com.

6 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (eb8e1847c263ef88b4f5e5f65ded29d3)

1 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (icreinstall_freewifihotspot.exe)

17 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (dcf26172f9805ca6d8038297d0c3b14e)

3 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (d926def131d94e137220d2ca74689c04)

12 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (155eba169e2e4f6d71a6b27d824d7d932ce6bc3eb437a55cf02fc2a9ac66857c)

2 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (3a3390c383f8f48877a6f56babc2f01b)

0 / 68
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (26c4390837a845fdfbb38968993cecdd)

1 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (3d08861614f7f32a0f32bd6ee9132e0e)

14 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (11766eee82ac947870432cfcc7f801d9)

12 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (1cdf79a1c72c21f1c29cf569856e4b41)

13 / 68    (PUP)

13 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (95fc8c8158124ddbf0f9bffef92e5d55)

12 / 68    (PUP)

12 / 68    (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (f64ba8a4d830c4cf9108da2fc5936896)

9 / 68      (PUP)

9 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (icreinstall_freewifihotspot.exe)

1 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (689512559902dbdf05fa9dbb93975d5c)

2 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (51d946aaa2df340fe070573741e2dc68)

0 / 68
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (8c29defdb189c464218901de82a4908e)

2 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (21521ce7afca6d29f3446222bb413718)

3 / 68      (PUP)
http://www.free-wifi-hotspot.com/FreeWiFiHotspot.exe  (864e25b551ffca5949f159590315fcb2)

The following 19 files have been seen to comunicate with www.free-wifi-hotspot.com in live environments.

URL:
http://www.free-wifi-hotspot.com/

Google Analytics:
UA-42293897

Title:
“Free WiFi Hotspot - Free WiFi Hotspot Creator - Turn Laptop into a Wi-Fi Router”

Description:
“Free WiFi Hotspot lets you hare your computer's Internet connection with other devices by creating a secure wireless hotspot.”

Web server:
Apache/2.4.7 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  8
Shares:  115
Comments:  3

Statistics are for the previous month.