» downloads.getsoftfree.com
Overview
Analysis
IPs Addresses (9)
Downloads (276)
Network (2)
Related Domains (15)

downloads.getsoftfree.com

Air Software (via a Proxy Registrant)

Domain Information

The domain downloads.getsoftfree.com is registered by proxy through ENOM, INC. and was originally registered in September of 2011. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.

Registrant:

WHOISGUARD, INC. on behalf of Air Software

Registrar:

ENOM, INC.

Server location:

New York, United States (US)

Create date:

Wednesday, September 14, 2011

Expires date:

Wednesday, September 14, 2016

Updated date:

Saturday, August 15, 2015

ASN:

AS46652 SERVERSTACK-ASN - ServerStack, Inc.

Root domain:

getsoftfree.com

Whois:

3 getsoftfree.com records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Air Software.AirSoftw.Bundler (M), PUP.Air Software (M), PUP.Softpulse (M), PUP.Adknowledge (M)

100.00%

The domain downloads.getsoftfree.com has been seen to resolve to the following 9 IP addresses.

108.168.218.35

108.168.218.35-static.reverse.softlayer.com

October 24, 2014

173.192.195.228

173.192.195.228-static.reverse.softlayer.com

September 4, 2014

173.192.195.226

173.192.195.226-static.reverse.softlayer.com

June 5, 2014

184.154.116.114

chicago.airinstaller.com

March 14, 2014

162.243.2.91

empire.airinstaller.com

February 7, 2014

50.23.68.85

50.23.68.85-static.reverse.softlayer.com

January 28, 2014

192.241.231.245

babar.airinstaller.com

January 14, 2014

192.241.139.115

justice.airinstaller.com

December 26, 2013

108.168.218.34

108.168.218.34-static.reverse.softlayer.com

December 13, 2013

File downloads found at URLs served by downloads.getsoftfree.com.

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=DI10cmURgC&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=5w10ZKsWk3 (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=N810BQZehI&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=3c107idHJ2&filename=Media Player Pro (media player pro.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Gx10AI5Jes&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Kv10QLOseD (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=wo10KhfWcL&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=USERID&sid=nym1CJOJ3P2Di6S2RxACGJjKspmQyNbwdyIKNzEuODIuMzguNCgB&filename= (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=vE10W2tCVz&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=3a51769c01e41ff4101f456b521a2c0c&sid=CD6891&filename=Setup (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Lf10rpKIRG (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=BJ10DUmznt&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=yg10Y4KI8e (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=2019sR0Fa7kiplJU1L.Ave1uuEzV000.&sid=20273&filename= (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=2m10kA6eQ3&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=rc10d5XJzS (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Oi10acQKPu (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=USERID&sid=lax1CMWQ1P2t6PfraRACGKiRvPu2nKPSFyINMTk5LjY2LjE2OC40NSgB&filename= (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=9H10IJnr6Y&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Yy10r2a5zC&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=oy10iWSAcY&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=1&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=${PIXEL_CONTEXT}&sid=xx&filename=Setup (setup.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=xj10CmonIf&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Kx10OrqvQg&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=wX10WizbQg&filename=Flash Playera (flash playera.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=qx106zGtAC&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=s610KeDbud&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?uid=Gk10Zq7MXQ&filename=Flash Player 12 (flash player 12.exe)

1 / 68 (Adware)

http://downloads.getsoftfree.com/get/click/.../?sid=xXx&uid=$&filename=Setup (setup.exe)

Latest 30 of 276 download URLs

The following 2 files have been seen to comunicate with downloads.getsoftfree.com in live environments.

TCP » 108.168.218.34:80

15ba9f94.exe (Google Talk by AirInstaller)

TCP » 173.192.195.228:80

setup.exe (Software Updater by AirInstaller)

Related Domains

realfreedownloads.com

trustydownloads.com

software-updater.com

updaterspro.com

thanksfordownloading.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.