www.topflvsoft.com

Whois Privacy Protection Service, Inc.  (Proxy Registrant)

Domain Information

The domain www.topflvsoft.com is registered by proxy through NAME.COM, INC. and was originally registered in January of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Singapore, Singapore within Singapore which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
NAME.COM, INC.

Server location:
Singapore, Singapore (SG)

Create date:
Wednesday, January 14, 2015

Expires date:
Thursday, January 14, 2016

Updated date:
Wednesday, January 14, 2015

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.PluginUpdateSL.F, PUP.Installer.Softpulse, PUP.Softpulse.PluginUp.Bundler (M)
100.00%

Kaspersky
not-a-virus:AdWare.Win32.SoftPulse
57.14%

Dr.Web
Trojan.Domaiq.105
57.14%

ESET NOD32
Win32/SoftPulse.S potentially unwanted application
57.14%

VIPRE Antivirus
Threat.4783235, Threat.4734384
57.14%

Avira AntiVirus
TR/Crypt.XPACK.Gen, APPL/Softpulse.aone
57.14%

Sophos
PUA 'SoftPulse' (of type Adware)
57.14%

Malwarebytes
PUP.Optional.DigiPlug
57.14%

K7 AntiVirus
Unwanted-Program
57.14%

Comodo Security
Application.Win32.SoftPulse.D
57.14%

AhnLab V3 Security
Win-PUP/SoftPulse, PUP/Win32.SoftPulse
57.14%

Vba32 AntiVirus
Signed-Adware.Softpulse
57.14%

AVG
Generic
57.14%

Panda Antivirus
Trj/Genetic.gen
57.14%

avast!
Win32:SoftPulse-CZ [PUP]
14.29%

The domain www.topflvsoft.com has been seen to resolve to the following 2 IP addresses.

May 4, 2015

May 4, 2015

File downloads found at URLs served by www.topflvsoft.com.

URL:
http://www.topflvsoft.com/

Title:
“Welcome to nginx!”

SSL certificate subject:
CN=sni30166.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx