This is WebPick Internet Holdings adware distribution test and deliver website where is generates adware bundles and provides distribution to its test clients. The domain www.toolkitfreefast.com is registered by proxy through NAME.COM, INC. and was originally registered in February of 2014. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter. The domain is associated with the publisher WEB PICK - INTERNET HOLDINGS LTD who is located in Ramat Hasharon, Israel.
Server location:
Oregon, United States (US)
Create date:
Tuesday, February 25, 2014
Expires date:
Wednesday, February 25, 2015
Updated date:
Tuesday, February 25, 2014
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
Adware.WebPick.Installer.?, PUP.AlexeyKurilenko.v, PUP.AlexeyKurilenko.l, PUP.AlexeyKurilenko.?, Adware.WebPick.Installer.t
100.00%
avast!
Win32:InstalleRex-BP [PUP], Win32:InstalleRex-CH [PUP], Win32:InstalleRex-BI [PUP]
100.00%
VIPRE Antivirus
Threat.4150696
100.00%
Dr.Web
Threat.Undefined, Trojan.Crossrider.28215, Trojan.WebPick.29
100.00%
Kaspersky
Trojan.Win32.AntiFW, not-a-virus:AdWare.Win32.MultiPlug
100.00%
McAfee
PUP-FHQ, Trojan.Artemis!BB57FC5359EE
100.00%
Malwarebytes
PUP.Optional.InstalleRex, PUP.Optional.DownloaderSS
100.00%
NANO AntiVirus
Riskware.Win32.InfoLeak.cvgqot, Riskware.Win32.MultiPlug.ddsvpv
100.00%
Agnitum Outpost
Trojan.AntiFW, PUA.MultiPlug
100.00%
Sophos
InstallRex, MultiPlug
100.00%
Comodo Security
Application.Win32.InstalleRex.KG, Application.Win32.GreenApp.RR
100.00%
Avira AntiVirus
Adware/InstallRex.HH, Adware/MultiPlug.aob, TR/AntiFW.b.86
100.00%
AVG
Generic, Adware Generic5, InstallRex
100.00%
IKARUS anti.virus
PUA.BInstaller, AdWare.SaveNet
83.33%
Panda Antivirus
PUP/TSUploader
83.33%
The domain www.toolkitfreefast.com has been seen to resolve to the following 7 IP addresses.
ec2-54-68-142-187.us-west-2.compute.amazonaws.com
November 10, 2014
ec2-54-68-85-18.us-west-2.compute.amazonaws.com
November 10, 2014
ec2-54-191-186-103.us-west-2.compute.amazonaws.com
August 17, 2014
ec2-54-191-92-23.us-west-2.compute.amazonaws.com
July 7, 2014
ec2-54-191-92-197.us-west-2.compute.amazonaws.com
July 7, 2014
ec2-54-191-83-149.us-west-2.compute.amazonaws.com
July 7, 2014
ec2-54-186-255-26.us-west-2.compute.amazonaws.com
April 27, 2014
File downloads found at URLs served by www.toolkitfreefast.com.
URL:
http://www.toolkitfreefast.com/
Title:
“Welcome to nginx!”
Network:
Amazon Web Services (AWS), running an EC2 instance
Statistics are for the previous month.
Related Domains