The domain s.allfree-soft.com is registered by proxy through Network Solutions, LLC and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
PERFECT PRIVACY, LLC
Registrar:
Network Solutions, LLC
Server location:
Virginia, United States (US)
Create date:
Friday, May 2, 2014
Expires date:
Saturday, May 2, 2015
Updated date:
Friday, May 2, 2014
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (88% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Blinkx.W, PUP.Installer.Applon.X, PUP.Installer.Rollnon.F, PUP.Optional.Installer.F, PUP.Rollnon.M, PUP.Installer.Rollnon.I, PUP.Adknowledge.InstallManager.Installer (M)
100.00%
VIPRE Antivirus
Ignition Installer, Rocketfuel Installer, Threat.4784938
85.71%
Trend Micro House Call
Suspicious_GEN.F47V0812, Suspicious_GEN.F47V0808, Suspicious_GEN.F47V0804
71.43%
McAfee
Artemis!79DA512AD361, Artemis!6F779444040E, Trojan.Artemis!D5E91201901F
71.43%
Sophos
BlinkX, Generic PUA DK, AirInstaller
57.14%
ESET NOD32
Win32/Verti (variant)
57.14%
AVG
Rollnon, Generic
42.86%
Malwarebytes
PUP.Optional.BundleInstaller.A, PUP.Optional.AirAdInstaller
42.86%
avast!
Win32:Rootkit-gen [Rtk], Adware-gen [Adw]
42.86%
Rising Antivirus
PE:Trojan.Dropper!6.3CE, PE:PUF.Airinstall!1.9C4C
28.57%
Qihoo 360 Security
HEUR/Malware.QVM18.Gen
28.57%
Kaspersky
not-a-virus:AdWare.Win32.Agent
28.57%
Baidu Antivirus
Adware.Win32.Agent
28.57%
IKARUS anti.virus
PUA.Verti, PUA.AirAdInstaller
28.57%
herdProtect (fuzzy)
a variant of e8bf8b1f41a809f47517ccb60f785796b57262d6
14.29%
The domain s.allfree-soft.com has been seen to resolve to the following 56 IP addresses.
server-52-85-131-101.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-87.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-68.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-30.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-24.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-16.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-248.iad53.r.cloudfront.net
July 20, 2016
server-52-85-131-194.iad53.r.cloudfront.net
July 20, 2016
server-52-84-125-32.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-232.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-230.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-123.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-89.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-71.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-44.iad16.r.cloudfront.net
July 7, 2016
server-52-84-125-38.iad16.r.cloudfront.net
July 7, 2016
server-52-85-131-45.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-22.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-180.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-173.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-144.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-131.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-124.iad53.r.cloudfront.net
June 6, 2016
server-52-85-131-111.iad53.r.cloudfront.net
June 6, 2016
server-52-85-142-73.iad12.r.cloudfront.net
May 16, 2016
server-52-85-142-52.iad12.r.cloudfront.net
May 16, 2016
server-52-85-142-46.iad12.r.cloudfront.net
May 16, 2016
server-52-85-142-246.iad12.r.cloudfront.net
May 16, 2016
server-52-85-142-242.iad12.r.cloudfront.net
May 16, 2016
server-52-85-142-224.iad12.r.cloudfront.net
May 16, 2016
Showing 30 of 56 IP Addresses
File downloads found at URLs served by s.allfree-soft.com.
The following 37 files have been seen to comunicate with s.allfree-soft.com in live environments.
URL:
http://s.allfree-soft.com/
Network:
Amazon Cloudfront