www.toolkitfreefast.com

WEB PICK - INTERNET HOLDINGS LTD  (via a Proxy Registrant)

Domain Information

This is WebPick Internet Holdings adware distribution test and deliver website where is generates adware bundles and provides distribution to its test clients. The domain www.toolkitfreefast.com is registered by proxy through NAME.COM, INC. and was originally registered in February of 2014. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter. The domain is associated with the publisher WEB PICK - INTERNET HOLDINGS LTD who is located in Ramat Hasharon, Israel.
Remove Malware from www.toolkitfreefast.com - Powered by Reason Core Security
Registrar:
NAME.COM, INC.

Server location:
Oregon, United States (US)

Create date:
Tuesday, February 25, 2014

Expires date:
Wednesday, February 25, 2015

Updated date:
Tuesday, February 25, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer.?, PUP.AlexeyKurilenko.v, PUP.AlexeyKurilenko.l, PUP.AlexeyKurilenko.?, Adware.WebPick.Installer.t
100.00%

avast!
Win32:InstalleRex-BP [PUP], Win32:InstalleRex-CH [PUP], Win32:InstalleRex-BI [PUP]
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

Dr.Web
Threat.Undefined, Trojan.Crossrider.28215, Trojan.WebPick.29
100.00%

Kaspersky
Trojan.Win32.AntiFW, not-a-virus:AdWare.Win32.MultiPlug
100.00%

McAfee
PUP-FHQ, Trojan.Artemis!BB57FC5359EE
100.00%

Malwarebytes
PUP.Optional.InstalleRex, PUP.Optional.DownloaderSS
100.00%

NANO AntiVirus
Riskware.Win32.InfoLeak.cvgqot, Riskware.Win32.MultiPlug.ddsvpv
100.00%

Agnitum Outpost
Trojan.AntiFW, PUA.MultiPlug
100.00%

Sophos
InstallRex, MultiPlug
100.00%

Comodo Security
Application.Win32.InstalleRex.KG, Application.Win32.GreenApp.RR
100.00%

Avira AntiVirus
Adware/InstallRex.HH, Adware/MultiPlug.aob, TR/AntiFW.b.86
100.00%

AVG
Generic, Adware Generic5, InstallRex
100.00%

Kingsoft AntiVirus
Win32.Troj.AntiFW.b.(kcloud), Win32.Troj.MultiPlug.bw.(kcloud)
83.33%

IKARUS anti.virus
PUA.BInstaller, AdWare.SaveNet
83.33%

The domain www.toolkitfreefast.com has been seen to resolve to the following 7 IP addresses.

ec2-54-68-142-187.us-west-2.compute.amazonaws.com
November 10, 2014

ec2-54-68-85-18.us-west-2.compute.amazonaws.com
November 10, 2014

ec2-54-191-186-103.us-west-2.compute.amazonaws.com
August 17, 2014

ec2-54-191-92-23.us-west-2.compute.amazonaws.com
July 7, 2014

ec2-54-191-92-197.us-west-2.compute.amazonaws.com
July 7, 2014

ec2-54-191-83-149.us-west-2.compute.amazonaws.com
July 7, 2014

ec2-54-186-255-26.us-west-2.compute.amazonaws.com
April 27, 2014

File downloads found at URLs served by www.toolkitfreefast.com.

34 / 68    (Adware)

29 / 68    (Adware)

URL:
http://www.toolkitfreefast.com/

Title:
“Welcome to nginx!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
openresty

Facebook:
Shares:  2

Statistics are for the previous month.

Remove Malware from www.toolkitfreefast.com - Powered by Reason Core Security