newfreescreensavers.com

OOO Internet Proekt

Domain Information

The domain newfreescreensavers.com registered by OOO Internet Proekt was initially registered in November of 2008 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, November 17, 2008

Expires date:
Thursday, November 17, 2016

Updated date:
Monday, November 19, 2012

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Gekkon.K, PUP.Gekkon.O, PUP.Gekkon.P, PUP.Gekkon.L, PUP.Installer.Gekkon.T, PUP.ExtendedSetup.M, PUP.Installer.OOO, PUP.OOO.Installer (M), PUP.Gekkon.Installer (M)
92.00%

Malwarebytes
PUP.Optional.InstallCore.A, PUP.Optional.Freemium.A
44.00%

VIPRE Antivirus
InstallCore.b, Threat.4837543
40.00%

ESET NOD32
Win32/InstallCore.FJ (variant), Win32/InstallCore.BC (variant), Win32/Toolbar.Conduit, Win32/InstallCore.DO (variant)
40.00%

Dr.Web
Adware.InstallCore.133, Trojan.Packed.24524
36.00%

SUPERAntiSpyware
PUP.InstallCore/Variant
28.00%

Comodo Security
Application.Win32.InstallCore.BWAN, Application.Win32.InstallCore.IK, UnclassifiedMalware, Application.Win32.InstallCore.AS
28.00%

Bkav FE
W32.Clodcf5.Trojan, W32.Clodbb3.Trojan
24.00%

K7 Gateway Antivirus
Unwanted-Program
24.00%

K7 AntiVirus
Unwanted-Program
24.00%

F-Prot
W32/InstallCore.R.gen, W32/A-42c63c6c
16.00%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594, PE:PUA.XPACK-LNR!1.5594
16.00%

Agnitum Outpost
PUA.InstallCore
16.00%

Vba32 AntiVirus
Downware.InstallCore
16.00%

Sophos
Install Core Click run software
16.00%

The domain newfreescreensavers.com has been seen to resolve to the following 2 IP addresses.

45.63.20.95.vultr.com
September 13, 2016

ec2-107-20-216-113.compute-1.amazonaws.com
December 22, 2013

File downloads found at URLs served by newfreescreensavers.com.

12 / 68    (PUP)

14 / 68    (PUP)

13 / 68    (PUP)

1 / 68      (PUP)

9 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (Adware)

9 / 68      (PUP)

1 / 68      (Adware)

2 / 68      (Adware)

3 / 68      (PUP)

13 / 68    (Adware)

1 / 68      (PUP)

10 / 68    (PUP)

10 / 68    (PUP)

10 / 68    (PUP)

9 / 68      (PUP)

1 / 68      (PUP)

8 / 68      (PUP)

URL:
http://newfreescreensavers.com/

Google Analytics:
UA-6424025

Title:
“New Free Screensavers”

Description:
“NewFreeScreensavers.com is a website with an ever-growing collection of safe and free screensavers. Download free screensavers for Windows and Mac safely and quickly!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.22 (Amazon) (PHP/5.3.28)

Facebook:
Likes:  1,231
Shares:  183
Comments:  49

Statistics above are for the previous month of August 2017.