home

www.yourfreeproxy.net

Axelight co.,Ltd.

Domain Information

The domain www.yourfreeproxy.net registered by Axelight co.,Ltd. was initially registered in November of 2015 through GMO INTERNET, INC. DBA ONAMAE.COM. Currently this domain has been known to host various forms of malware. The hosted servers are located in Hollywood, Florida within the United States which resides on the Prolexic Technologies, Inc. network.
Registrar:
GMO INTERNET, INC. DBA ONAMAE.COM

Server location:
Florida, United States (US)

Create date:
Tuesday, November 24, 2015

Expires date:
Thursday, November 24, 2016

Updated date:
Tuesday, November 24, 2015

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Root domain:
yourfreeproxy.net

Whois:
1 yourfreeproxy.net record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, Win32.Generic
100.00%

McAfee
RDN/Generic.hra!bs
50.00%

Norman
Suspicious_Gen5.AGIYR
50.00%

Trend Micro House Call
TROJ_GEN.R0CBH07IJ13
50.00%

Vba32 AntiVirus
Trojan.Badur
50.00%

Panda Antivirus
Suspicious file
50.00%

Baidu Antivirus
Trojan.Win32.Badur
50.00%

The domain www.yourfreeproxy.net has been seen to resolve to the following IP address.

72.52.4.120
unknown.prolexic.com
March 3, 2016

File downloads found at URLs served by www.yourfreeproxy.net.

1 / 68      (PUP)
http://www.yourfreeproxy.net/.../FreeProxySetup.exe  (75e6ab91bb1c8c3e27146a1509d7c3fe)

7 / 68      (Malware)
http://www.yourfreeproxy.net/.../FreeProxySetup.exe  (066984db5c85079767b81be9525ac9f5)

The following 74 files have been seen to comunicate with www.yourfreeproxy.net in live environments.

TCP » 72.52.4.120:80
kb799693963.exe

TCP » 72.52.4.120:80
whAgent.exe (webHancer Customer Companion by webHancer)

TCP » 72.52.4.120:80
monhost.exe (monhost.exe by Vested Development, Inc)

TCP » 72.52.4.120:80
online-guardian-v2.0.9.exe

TCP » 72.52.4.120:80
winalert.exe

TCP » 72.52.4.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.120:80
guacuilanmog.exe

TCP » 72.52.4.120:80
cssrs.exe

TCP » 72.52.4.120:80
Alternative Flash Player Auto-Updater.exe (Flash Player Auto-Updater by Wecode.biz)

TCP » 72.52.4.120:80
adobe online.com

TCP » 72.52.4.120:80
hbpzabffmyx.exe

TCP » 72.52.4.120:80
onlineguardian-v2.exe

TCP » 72.52.4.120:80
apptrailers.exe

TCP » 72.52.4.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.120:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 72.52.4.120:80
updates.exe

TCP » 72.52.4.120:80
mirc.exe (mIRC by mIRC Co)

TCP » 72.52.4.120:80
csrss.exe

TCP » 72.52.4.120:80
photo.exe

TCP » 72.52.4.120:80
adobe online.com

 
Latest 20 of 81 files

URL:
http://www.yourfreeproxy.net/

Title:
“yourfreeproxy.net - This website is for sale! - yourfreeproxy Resources and Information.”

Description:
“This website is for sale! yourfreeproxy.net is your first and best source for all of the information you’re looking for. From general topics to more of what you would expect to find here, yourfreeproxy.net has it all. We hope you find what you a...”

Web server:
Apache (PHP/5.3.3-7+squeeze28)

Facebook:
Shares:  1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.