home

www.freeease.net

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.freeease.net is registered by proxy through ENOM, INC. and was originally registered in July of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
ENOM, INC.

Create date:
Wednesday, July 4, 2012

Expires date:
Friday, July 4, 2014

Updated date:
Friday, October 18, 2013

ASN:
AS21844 THEPLANET-AS - ThePlanet.com Internet Services, Inc.,US

Root domain:
freeease.net

Whois:
1 freeease.net record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.BB, Win32.Generic
100.00%

ESET NOD32
Win32/InstallMonetizer.AF, Win32/OpenCandy (variant)
66.67%

The domain www.freeease.net has been seen to resolve to the following 2 IP addresses.

184.173.227.113
184.173.227.113-static.reverse.softlayer.com
August 1, 2016

174.123.129.100
64.81.7bae.static.theplanet.com
April 16, 2014

File downloads found at URLs served by www.freeease.net.

1 / 68      (PUP)
http://www.freeease.net/FreeEasyRingtoneMaker.exe  (7882347de5c126afc61830daa9985cc7)

2 / 68      (PUP)
http://www.freeease.net/FreeEasyAudioRecorder.exe  (8dc93c37c63ef8f696b92c50ccd402e9)

2 / 68      (PUP)
http://www.freeease.net/FreeEasyVideotoGIFConverter.exe  (c585bd0c18326638bb034b0e31c3362c)

The following 15 files have been seen to comunicate with www.freeease.net in live environments.

TCP » 184.173.227.113:80
goup.exe

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
goup.exe

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
freemore-avi-wmv-mp4-mpeg-divx-video-converter.exe

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://www.freeease.net/

Google Analytics:
UA-34414940

Title:
“Free Audio Editing Software, Free Video Converting Software, Free Photo Converting Software by FreeEaseSoft”

Description:
“FreeEase provides the world's leading free multimedia software, including audio and video converting software, photo editing software and more multimedia solutions. 100% free.”

Web server:
Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.2.8

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.