The domain i.get-soft.com is registered by proxy through Network Solutions, LLC and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrant:
PERFECT PRIVACY, LLC
Registrar:
Network Solutions, LLC
Server location:
Virginia, United States (US)
Create date:
Friday, May 16, 2014
Expires date:
Monday, May 16, 2016
Updated date:
Tuesday, March 17, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Win.Reputation, PUP.Nextup.BB, PUP.Nextup.I, PUP.Nextup.G, PUP.Nextup.EE, PUP.VertiTechnologyGroup.g, PUP.VertiTechnologyGroup.Y, Threat.Win.Reputation.IMP, PUP.Adknowledge.Nextup.Bundler (M)
97.96%
avast!
Win32:PUP-gen [PUP], Win32:Dropper-gen [Drp], Win32:Rootkit-gen [Rtk], Win32:Adware-BGF [PUP], Win32:Adware-gen [Adw], Win32:Malware-gen
93.88%
VIPRE Antivirus
Rocketfuel Installer, Threat.4786530
87.76%
Malwarebytes
PUP.Optional.NextUp, PUP.Optional.Bundle, PUP.Optional.Verti, PUP.Optional.RocketFuel, PUP.Optional.Rocketfuel
73.47%
G Data
Win32.Application.Nextup, Dropped:Trojan.GenericKD.1943469, Trojan.GenericKD.1933785, MemScan:Application.Bundler.HR, Win32.Trojan.Agent.IHXFVJ
63.27%
McAfee
Artemis!C96BD5645D12, Program.Artemis!20BED7603DED, Artemis!CE8DA1A63129, Artemis!5604D42BE6B0, Artemis!B937664B7004, Artemis!578A283F462D, Artemis!8C5E8294C15A, Artemis!13886B1C6469, Artemis!E6B775504356, Artemis!1053EF4C542D, Artemis!72B47623E668, Artemis!B5292EE9102D
61.22%
Dr.Web
Adware.Downware.5905, Adware.Downware.6396, Adware.Downware.6704, Adware.Downware.8721
59.18%
Trend Micro House Call
Suspicious_GEN.F47V0708, Suspicious_GEN.F47V0718, Suspicious_GEN.F47V0717, Suspicious_GEN.F47V0802, Suspicious_GEN.F47V0719
55.10%
ESET NOD32
Win32/Verti (variant)
55.10%
Sophos
NextUp, Generic PUA BD, Generic PUA BJ
53.06%
K7 AntiVirus
Trojan , Unwanted-Program
44.90%
Baidu Antivirus
Trojan.Win32.Verti, PUA.Win32.Verti
44.90%
IKARUS anti.virus
PUA.Nextup, PUA.Verti
40.82%
SUPERAntiSpyware
Trojan.Agent/Gen-Verti, Trojan.Agent/Gen-Nullo[Short]
30.61%
The domain i.get-soft.com has been seen to resolve to the following 232 IP addresses.
server-52-85-131-106.iad53.r.cloudfront.net
June 7, 2016
server-52-85-131-80.iad53.r.cloudfront.net
June 7, 2016
server-52-85-131-144.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-131.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-124.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-111.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-45.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-22.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-180.iad53.r.cloudfront.net
May 17, 2016
server-52-85-131-173.iad53.r.cloudfront.net
May 17, 2016
server-54-192-101-213.iad2.r.cloudfront.net
October 7, 2015
server-54-192-101-87.iad2.r.cloudfront.net
October 7, 2015
server-54-230-102-199.iad2.r.cloudfront.net
October 7, 2015
server-54-192-55-161.jfk6.r.cloudfront.net
May 4, 2015
server-54-230-52-91.jfk6.r.cloudfront.net
May 4, 2015
server-54-230-55-223.jfk6.r.cloudfront.net
May 4, 2015
server-54-230-53-82.jfk6.r.cloudfront.net
May 4, 2015
server-54-192-54-173.jfk6.r.cloudfront.net
May 4, 2015
server-54-192-54-195.jfk6.r.cloudfront.net
May 4, 2015
server-54-192-54-193.jfk6.r.cloudfront.net
May 4, 2015
server-54-192-54-198.jfk6.r.cloudfront.net
May 4, 2015
server-54-240-160-66.iad12.r.cloudfront.net
March 5, 2015
server-54-230-19-158.iad12.r.cloudfront.net
March 5, 2015
server-54-230-18-97.iad12.r.cloudfront.net
March 5, 2015
server-54-230-17-253.iad12.r.cloudfront.net
March 5, 2015
server-54-240-160-211.iad12.r.cloudfront.net
March 5, 2015
server-54-230-102-48.iad2.r.cloudfront.net
January 13, 2015
server-54-192-101-102.iad2.r.cloudfront.net
January 13, 2015
server-54-230-102-214.iad2.r.cloudfront.net
January 13, 2015
server-54-192-101-119.iad2.r.cloudfront.net
December 27, 2014
Showing 30 of 232 IP Addresses
File downloads found at URLs served by i.get-soft.com.
The following 92 files have been seen to comunicate with i.get-soft.com in live environments.
URL:
http://i.get-soft.com/
Network:
Amazon Cloudfront