update.safesearch.net
AVSoftware
Domain Information
The domain update.safesearch.net registered by AVSoftware was initially registered in August of 2002 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Monday, August 19, 2002
Expires date:
Saturday, August 19, 2017
Updated date:
Sunday, August 9, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.AVSoftwareEOOD.G, PUP.Installer.AVSoftwareEOOD.O, PUP.Installer.AVSoftware EOOD, Threat.AVSoftware EOOD.Installer, PUP.AVSoftware EOOD.Installer, PUP.AVSoftware EOOD.AVSoftwareEOOD.Installer (M), PUP.AVSoftware EOOD.Installer (M)
100.00%
Dr.Web
Threat.Undefined, Adware.Toolbar.247
88.89%
ESET NOD32
Detection.Undefined
44.44%
Sophos
Install Core Click run software, PUA 'Install Core Click run software'
33.33%
Rising Antivirus
PE:Trojan.Win32.SpeedingUpMyPC.a!1075357520
33.33%
The domain update.safesearch.net has been seen to resolve to the following 50 IP addresses.
server-54-192-18-189.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-153.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-120.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-106.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-69.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-31.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-237.iad12.r.cloudfront.net
May 27, 2016
server-54-192-18-219.iad12.r.cloudfront.net
May 27, 2016
server-54-192-195-52.iad53.r.cloudfront.net
May 15, 2016
server-54-192-195-34.iad53.r.cloudfront.net
May 15, 2016
server-54-192-195-224.iad53.r.cloudfront.net
May 15, 2016
server-54-192-195-215.iad53.r.cloudfront.net
May 15, 2016
server-54-192-195-128.iad53.r.cloudfront.net
May 15, 2016
server-54-192-195-92.iad53.r.cloudfront.net
May 15, 2016
server-54-192-195-61.iad53.r.cloudfront.net
May 15, 2016
server-52-85-130-189.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-152.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-125.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-99.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-58.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-47.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-212.iad53.r.cloudfront.net
April 22, 2016
server-52-85-130-196.iad53.r.cloudfront.net
April 22, 2016
server-54-192-195-113.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-55.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-6.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-232.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-211.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-187.iad53.r.cloudfront.net
April 5, 2016
server-54-192-195-169.iad53.r.cloudfront.net
April 5, 2016
Showing 30 of 50 IP Addresses
File downloads found at URLs served by update.safesearch.net.
The following 5 files have been seen to comunicate with update.safesearch.net in live environments.
URL:
http://update.safesearch.net/
Network:
Amazon Cloudfront
SSL certificate subject:
CN=safesearch.net
SSL certificate issuer:
CN=Amazon, OU=Server CA 1B, O=Amazon, C=US
