www.softlicious.info

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.softlicious.info is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GoDaddy.com, LLC

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.SETUPPROCESS.AA, PUP.Installer.AppsInstallerSL.L, Adware.Solimba.Installer.R, PUP.Installer.Firseria.R, PUP.Installer.AppsInstallerSL.P, PUP.Solimba.AppsInstaller.Installer (M), PUP.Solimba.SETUPPROCESS.Bundler (M), PUP.Solimba.Firseria.Bundler (M), PUP.Solimba.AppsInst.Bundler (M), PUP.Solimba.FIRSERIA.Bundler (M)
89.66%

Malwarebytes
PUP.Optional.Bundler, PUP.Optional.AppsInstaller, PUP.Optional.Solimba, PUP.Optional.Firseria, PUP.Optional.BundleInstall
55.17%

K7 Gateway Antivirus
Unwanted-Program , Trojan
55.17%

VIPRE Antivirus
DownloadMR, Trojan.Win32.Generic
55.17%

G Data
Win32.Application.Morstar, Gen:Application.Bundler.Firseria, Application.Downloader.SK
55.17%

Vba32 AntiVirus
Downware.Morstar
55.17%

McAfee
Artemis!953AF887EFED, Artemis!9C60C9B4ABB1, Artemis!F8566ACC63AE, Artemis!DE82DB043E6F, Artemis!31236D3BCE60, Artemis!18276482880B, Artemis!E3706F36415C, Artemis!D31BCC26373F, Artemis!299DC0DE8B52, Artemis!2549E5AD4693, Artemis!5C109E39AA67, Program.Artemis!885D24362EEE, Artemis!7B26620DAFAD
51.72%

Agnitum Outpost
Packed/MPress, PUA.Firseria
51.72%

McAfee Web Gateway
Artemis!953AF887EFED, Artemis!9C60C9B4ABB1, Artemis!F8566ACC63AE, Artemis!DE82DB043E6F, Artemis!31236D3BCE60, Artemis!18276482880B
51.72%

Sophos
Solimba Installer
51.72%

AVG
BundleApp, Generic_c, AdInstaller.Firseria, Adware BundleApp.DH, MalSign.Solimba, Adware BundleApp.YDW
51.72%

ESET NOD32
Win32/FirseriaInstaller (variant), Win32/FirseriaInstaller.C potentially unwanted (variant)
48.28%

K7 AntiVirus
Trojan , Unwanted-Program
44.83%

Trend Micro House Call
TROJ_GEN.F47V0208, TROJ_GEN.F47V0411, TROJ_GEN.F47V0328, TROJ_GEN.F47V0221, TROJ_GEN.F47V0505, TROJ_GEN.F47V0510, TROJ_GEN.F47V0507
41.38%

Panda Antivirus
Trj/Genetic.gen, Adware/Firseria, Trj/OCJ.E
41.38%

The domain www.softlicious.info has been seen to resolve to the following 3 IP addresses.

157-7-107-61.virt.lolipop.jp
July 11, 2016

ip-50-63-202-34.ip.secureserver.net
April 8, 2016

50-87-150-32.unifiedlayer.com
February 14, 2014

File downloads found at URLs served by www.softlicious.info.

1 / 68      (Adware)
http://www.softlicious.info/HerobrineMod 1.6.4.exe  (13de83b3c5c0d76c9ea1d2185fa36181)

1 / 68      (Adware)
http://www.softlicious.info/FerullosGunMod 1.6.4.exe  (1d70e8a1f04beeef9dbcd170d58bc7b1)

1 / 68      (Adware)
http://www.softlicious.info/.../McPatcher1.7.2.exe  (e2bf79fdd9c530977303a353b4238259)

5 / 68      (PUP)
http://www.softlicious.info/.../TooManyItems1.7.exe  (58d0d287369d0106715e1edf3434b946)

1 / 68      (Adware)
http://www.softlicious.info/.../SwordArtOlnline1.6.4.exe  (b0f9899132ec4d339e92af02c7e95763)

1 / 68      (Adware)
http://www.softlicious.info/.../TaleOfKingdoms1.6.4.exe  (013898228d29f47bdbf3017c07169a21)

35 / 68    (Adware)
http://www.softlicious.info/FerullosGunMod 1.6.4.exe  ({07f78025-5a7e-45bc-bd31-7840ca528ccf})

1 / 68      (Adware)
http://www.softlicious.info/.../RaisMinimap1.6.4.exe  (381391545f1e0ec405504f4d46d6bf84)

1 / 68      (Adware)

37 / 68    (PUP)
http://www.softlicious.info/.../MinecraftForge1.7.2.exe  (885d24362eee0b717b62378224417dff)

1 / 68      (Adware)
http://www.softlicious.info/.../AnimatedPlayer1.7.2.exe  (dd235d77655959c29fdbd3eb14bd2ce0)

1 / 68      (Adware)
http://www.softlicious.info/.../MinecraftForge1.7.2.exe  (47aa9ec38b87f0459145408ef4b81d17)

1 / 68      (Adware)

37 / 68    (Adware)
http://www.softlicious.info/.../MinecraftForge1.7.2.exe  (e13062e566d24b603e7d5498b3200301)

12 / 68    (Adware)
http://www.softlicious.info/.../TooManyItems1.7.exe  (7b26620dafad26ba2bef6a3932f23076)

11 / 68    (Adware)
http://www.softlicious.info/.../MinecraftForge1.7.2.exe  (6faa83aab3f512fb120ef2d0f5dbae6c)

2 / 68      (false positives)

23 / 68    (Adware)

1 / 68
http://www.softlicious.info/.../TooManyItems1.7.exe  (82c17c8c0a4964cc84ee6a5603228370)

15 / 68    (Adware)
http://www.softlicious.info/.../TooManyItems1.7.9.exe  (18276482880bf2b51fb4bda724b82866)

25 / 68    (Adware)
http://www.softlicious.info/.../TooManyItems1.7.exe  (2549e5ad4693ad5decf02f1d3f491ca0)

18 / 68    (Adware)
http://www.softlicious.info/.../MinecraftForge1.6.4.exe  (299dc0de8b5228db5ef61ac968dd99da)

15 / 68    (Adware)
http://www.softlicious.info/.../mocreatures1.6.4.exe  (e3706f36415c8cb2e36316807392d2f8)

20 / 68    (Adware)
http://www.softlicious.info/.../Optifine1.7.9.exe  (d31bcc26373f1f93aa5e2285b8d082f5)

22 / 68    (Adware)
http://www.softlicious.info/.../MinecraftForge1.7.2.exe  (31236d3bce60b964c7ebb3cd1d62d60a)

20 / 68    (Adware)
http://www.softlicious.info/.../MinecraftForge1.7.2.exe  (de82db043e6fffcb7542f9587f3dacb2)

21 / 68    (Adware)

21 / 68    (Adware)

15 / 68    (Adware)

The following 3 files have been seen to comunicate with www.softlicious.info in live environments.

URL:
http://www.softlicious.info/

Title:
“Contact Support”

Title (2/14/2014):
“:: Softlicious, 1click installers monetization ::”

Title (8/1/2014):
“SmartON - Premium Multipurpose HTML5/CSS3 Theme - FourGrafx”

Description:
“SmartOn is a complete responsive, retina-ready and multipurpose theme.”

Web server:
nginx/1.8.1