free-safe.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain free-safe.com is registered by proxy through ENOM, INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Wednesday, April 30, 2014

Expires date:
Saturday, April 30, 2016

Updated date:
Tuesday, March 31, 2015

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.QualityScore
100.00%

Reason Heuristics
PUP.Installer.QUALITYSCORESL.O, PUP.Installer.QUALITYSCORESL.L
100.00%

Comodo Security
ApplicUnwnt
50.00%

ESET NOD32
MSIL/Adware.Colooader
50.00%

Qihoo 360 Security
Win32/Trojan.Adware.2bf
50.00%

The domain free-safe.com has been seen to resolve to the following 3 IP addresses.

May 16, 2016

get.get-instant.com
March 15, 2015

162-144-91-108.unifiedlayer.com
June 22, 2014

File downloads found at URLs served by free-safe.com.

5 / 68      (Adware)

5 / 68      (Adware)
http://free-safe.com/bin/.../adw-cleaner.exe  (44c251bf32b35b796cb3fac3076582ab)

5 / 68      (Adware)

5 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)
http://free-safe.com/bin/.../ms-office-2013.exe  (b9f4f4798dcced58ea956fa1b2c852b1)

The following 2 files have been seen to comunicate with free-safe.com in live environments.

September 30, 2014

URL:
http://free-safe.com/

Title:
“Free Safe”

Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4 (PHP/5.4.26)

30 of 36 related domains