www.wifihotspotcreator.com

W3i, LLC

Domain Information

The domain www.wifihotspotcreator.com registered by Jonathan Danucalov was initially registered in October of 2011 through GODADDY.COM, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below). The domain is associated with the publisher W3i, LLC who is located in Sartell, Minnesota in the United States.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Thursday, October 27, 2011

Expires date:
Tuesday, October 27, 2015

Updated date:
Monday, October 27, 2014

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

Dr.Web
Adware.W3i.9, Adware.W3i.32, Adware.Downware.2512, Adware.Downware.8723
66.67%

Reason Heuristics
PUP.Installer.W3i.J, PUP.Installer.InstallX.X, PUP.Installer.SecureInstall.X, PUP.WebDev.ET (M)
66.67%

VIPRE Antivirus
InstallIQ Installer
50.00%

ESET NOD32
Win32/InstallIQ (variant)
50.00%

Malwarebytes
PUP.Optional.InstallIQ.A, PUP.Optional.SafeInstall.A
50.00%

Trend Micro House Call
TROJ_GEN.F47V1216, TROJ_GEN.F47V0429, Suspicious_GEN.F47V0106
50.00%

ESET NOD32
Win32/WebDevAZ.C potentially unwanted application, Win32/DownWare.L potentially unwanted application
50.00%

Comodo Security
UnclassifiedMalware, Application.Win32.InstallIQ.B
33.33%

Avira AntiVirus
APPL/InstallIQ.Gen5
33.33%

Bkav FE
HW32.Laneul, W32.Clodc59.Trojan
33.33%

Rising Antivirus
PE:PUF.InstallIQ!1.9E4F
33.33%

McAfee
Artemis!7DC472F5C4A3, Artemis!33257E9B1F90
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

NANO AntiVirus
Trojan.Win32.Searcher.cjaztx, Riskware.Win32.Searcher.csnymk
33.33%

Sophos
InstallQ, DomainIQ pay-per install
33.33%

The domain www.wifihotspotcreator.com has been seen to resolve to the following 6 IP addresses.

May 31, 2016

May 31, 2016

March 15, 2014

March 15, 2014

August 5, 2013

August 5, 2013

File downloads found at URLs served by www.wifihotspotcreator.com.

2 / 68      (PUP)

3 / 68      (inconclusive)

3 / 68      (PUP)

10 / 68    (Adware)

26 / 68    (Adware)

11 / 68    (Adware)

URL:
http://www.wifihotspotcreator.com/

Google Analytics:
UA-1412340

Title:
“WiFi HotSpot Creator - Free Windows WiFi HotSpot Software”

Description:
“Wi-Fi HotSpot Creator shares your internet connection (DSL, Cable, Mobile Broadband Card, Dial-Up, etc) through the built-in wireless card on your computer. It uses the same technology and security that other commercially available Wi-Fi routers ...”

SSL certificate subject:
CN=ssl2969.cloudflare.com, O="CloudFlare, Inc.", L=San Francisco, S=CA, C=US

SSL certificate issuer:
CN=GlobalSign Organization Validation CA - G2, O=GlobalSign nv-sa, C=BE

Web server:
cloudflare-nginx