home

www.freeappstools.com

xianlin xie

Domain Information

The domain www.freeappstools.com registered by xianlin xie was initially registered in July of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Texas, United States (US)

Create date:
Monday, July 15, 2013

Expires date:
Sunday, July 15, 2018

Updated date:
Friday, December 19, 2014

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
freeappstools.com

Whois:
3 freeappstools.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ElexdoBrasilParticipacoesa.X, PUP.BeijingELEXTechnologyCoLtd.J, PUP.ELEX.BeijingELEXTechnology (M), PUP.ELEX.337Technology (M), PUP.ELEX.337Techn (M)
100.00%

McAfee
Artemis!4DCF47CBC4F5, RDN/Generic PUP.x!cg3, Artemis!1C395B60DDE4
50.00%

Avira AntiVirus
ADWARE/Adware.Gen2
50.00%

ESET NOD32
Win32/ELEX (variant), Win32/ELEX.C potentially unwanted (variant)
50.00%

Dr.Web
Adware.Mutabaha.45, Adware.Mutabaha.52
50.00%

Malwarebytes
Trojan.ELEX, PUP.Optional.Elex.A
33.33%

Agnitum Outpost
Riskware.Agent
33.33%

Sophos
Generic PUA FA, Generic PUA CO
33.33%

G Data
Win32.Adware.Elex
33.33%

Baidu Antivirus
Adware.Win32.ELEX
33.33%

Fortinet FortiGate
Riskware/Elex
33.33%

Trend Micro House Call
TROJ_GEN.F47V0226
16.67%

Vba32 AntiVirus
Downloader.Elex
16.67%

NANO AntiVirus
Trojan.Win32.Elex.cumwmi
16.67%

Emsisoft Anti-Malware
Trojan.Win32.Agent
16.67%

The domain www.freeappstools.com has been seen to resolve to the following 2 IP addresses.

50.97.45.27
50.97.45.27-static.reverse.softlayer.com
September 15, 2014

173.192.211.213
173.192.211.213-static.reverse.softlayer.com
April 16, 2014

File downloads found at URLs served by www.freeappstools.com.

1 / 68      (Adware)
http://www.freeappstools.com/download/ps/qianlong/.../qianlongzhushou.exe  (f3924d43de56e811a80f28088e588ae9)

1 / 68      (Adware)
http://www.freeappstools.com/download/ps/.../free_apps_tools.exe  (c58e401444dc7439a4b5e944821ff54d)

1 / 68      (Adware)
http://www.freeappstools.com/download/.../free_apps_tools.exe  (11d0f1b97fc86e875f947366c62d7bd3)

12 / 68    (PUP)
http://www.freeappstools.com/download/ps/goplayer/.../go_player.exe  (1c395b60dde4e8f510ee1ca37368ae59)

12 / 68    (PUP)
http://www.freeappstools.com/download/ps/goplayer/.../go_player.exe  (533441054245ac3e89b5376c2b0b6ac1)

11 / 68    (PUP)
http://www.freeappstools.com/download/.../cleaner_ava.exe  (yet_another_cleaner_ash.exe)

The following 93 files have been seen to comunicate with www.freeappstools.com in live environments.

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
isafe.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
isafe.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
isafe.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
isafe.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
isafe.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
isafe.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

TCP » 173.192.211.213:80
iSafeTray.exe (YAC Security Protection by Elex do Brasil Participaçõesa)

 
Latest 20 of 94 files

URL:
http://www.freeappstools.com/

Google Analytics:
UA-42391466

Title:
“Hot free apps for android download.”

Description:
“More than 50000+ hot android apps&games can be free downloaded. Enjoy them and update everyday!”

Web server:
ngx_openresty

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.