home

sd-cf.softonic.jp

Softonic International SA

Domain Information

The domain sd-cf.softonic.jp registered by Softonic International SA was initially registered in August of 2005. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Server location:
New York, United States (US)

Create date:
Wednesday, August 31, 2005

Expires date:
Wednesday, August 31, 2016

Updated date:
Tuesday, September 1, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
softonic.jp

Whois:
4 softonic.jp records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.DD, Bundler.PPI.Softonic.EE, Bundler.PPI.Softonic.a, Bundler.PPI.Softonic.l, Bundler.PPI.Softonic.q, Bundler.PPI.Softonic.b, PUP.Softonic.Bundler (M)
100.00%

Dr.Web
Adware.Downware.1657, Adware.Downware.804, Adware.Downware.4164, Adware.Downware.5107, Adware.Downware.2454, Adware.Downware.910
62.50%

ESET NOD32
Win32/SoftonicDownloader (variant)
62.50%

Malwarebytes
PUP.Optional.Softonic.A
56.25%

VIPRE Antivirus
Softonic Downloader, Trojan.Win32.Generic, Threat.4786139
56.25%

Trend Micro House Call
HV_ZYX_CA252911.TOMC, TROJ_GEN.F47V0110, TROJ_GEN.F47V1220, Suspicious_GEN.F47V0703, Suspicious_GEN.F47V0610, TROJ_GEN.F47V0326
43.75%

K7 AntiVirus
Unwanted-Program
43.75%

Agnitum Outpost
PUA.Softonic, PUA.Downloader
43.75%

Rising Antivirus
PE:Malware.Obscure/Huer!1.9E03, PE:Malware.Obscure/Heur!1.9E03
37.50%

McAfee
Artemis!E705734D43B4, Artemis!50A36F01D3C1, Artemis!F2B21CE44CF5, Artemis!D73B8950632D, Artemis!24C434F566F3
31.25%

Fortinet FortiGate
Riskware/Agent, Riskware/Softonicdownloader
31.25%

Kaspersky
not-a-virus:Downloader.Win32.Agent
25.00%

Baidu Antivirus
Adware.Win32.SoftonicDownloader
25.00%

F-Prot
W32/Softonic.C.gen, W32/Softonic.C2.gen, W32/A-1b2ffd18
25.00%

NANO AntiVirus
Riskware.Win32.Downware.dbzrzs, Riskware.Win32.Downware.czvjdn, Riskware.Win32.Downware.cwfvqw
18.75%

The domain sd-cf.softonic.jp has been seen to resolve to the following 69 IP addresses.

46.28.209.73
March 1, 2016

54.230.17.172
server-54-230-17-172.iad12.r.cloudfront.net
December 1, 2014

54.230.17.91
server-54-230-17-91.iad12.r.cloudfront.net
December 1, 2014

54.230.16.229
server-54-230-16-229.iad12.r.cloudfront.net
December 1, 2014

54.230.16.175
server-54-230-16-175.iad12.r.cloudfront.net
December 1, 2014

54.240.160.137
server-54-240-160-137.iad12.r.cloudfront.net
December 1, 2014

54.230.19.194
server-54-230-19-194.iad12.r.cloudfront.net
December 1, 2014

54.230.18.38
server-54-230-18-38.iad12.r.cloudfront.net
December 1, 2014

54.230.17.182
server-54-230-17-182.iad12.r.cloudfront.net
December 1, 2014

54.230.50.125
server-54-230-50-125.jfk5.r.cloudfront.net
August 1, 2014

54.230.48.137
server-54-230-48-137.jfk5.r.cloudfront.net
August 1, 2014

54.230.49.52
server-54-230-49-52.jfk5.r.cloudfront.net
August 1, 2014

54.230.48.178
server-54-230-48-178.jfk5.r.cloudfront.net
August 1, 2014

54.230.49.148
server-54-230-49-148.jfk5.r.cloudfront.net
August 1, 2014

54.230.51.67
server-54-230-51-67.jfk5.r.cloudfront.net
August 1, 2014

54.230.49.221
server-54-230-49-221.jfk5.r.cloudfront.net
August 1, 2014

54.230.49.122
server-54-230-49-122.jfk5.r.cloudfront.net
August 1, 2014

54.230.50.190
server-54-230-50-190.jfk5.r.cloudfront.net
August 1, 2014

205.251.251.4
server-205-251-251-4.jfk5.r.cloudfront.net
August 1, 2014

54.230.48.38
server-54-230-48-38.jfk5.r.cloudfront.net
August 1, 2014

205.251.251.11
server-205-251-251-11.jfk5.r.cloudfront.net
August 1, 2014

54.230.51.130
server-54-230-51-130.jfk5.r.cloudfront.net
August 1, 2014

54.230.48.81
server-54-230-48-81.jfk5.r.cloudfront.net
August 1, 2014

54.230.38.145
server-54-230-38-145.jfk1.r.cloudfront.net
July 23, 2014

54.230.38.112
server-54-230-38-112.jfk1.r.cloudfront.net
July 23, 2014

54.230.38.139
server-54-230-38-139.jfk1.r.cloudfront.net
July 23, 2014

54.230.38.200
server-54-230-38-200.jfk1.r.cloudfront.net
July 23, 2014

54.230.39.108
server-54-230-39-108.jfk1.r.cloudfront.net
July 23, 2014

204.246.169.122
server-204-246-169-122.jfk1.r.cloudfront.net
July 23, 2014

54.230.37.151
server-54-230-37-151.jfk1.r.cloudfront.net
July 23, 2014

 
Showing 30 of 69 IP Addresses

File downloads found at URLs served by sd-cf.softonic.jp.

1 / 68      (PUP)
http://sd-cf.softonic.jp/107000/107191/.../SoftonicDownloader_for_firefox19.exe  (d5f37c9a0b511c0e39e038d053ba1e33)

1 / 68      (PUP)
http://sd-cf.softonic.jp/189000/189271/.../SoftonicDownloader_for_minecraft.exe  (1a358a31dd35a079bfaea05786fdb77f)

1 / 68      (PUP)
http://sd-cf.softonic.jp/73000/73632/.../SoftonicDownloader_for_google-chrome-browser.exe  (d9539ae299f1aa90accfe7db18ada9f6)

13 / 68    (PUP)
http://sd-cf.softonic.jp/57000/57475/.../SoftonicDownloader_for_dvd-flick.exe  (e705734d43b4caad2cbe6b71b3946a38)

1 / 68      (PUP)
http://sd-cf.softonic.jp/38000/38594/.../SoftonicDownloader_for_hamachi.exe  (2b46ef0657e822f74b195b36d492205d)

1 / 68      (PUP)
http://sd-cf.softonic.jp/3335000/3335004/.../SoftonicDownloader_for_avira-internet-security.exe  (35f228a4d7342ea9e97a049530dafec3)

11 / 68    (PUP)
http://sd-cf.softonic.jp/251000/251932/.../SoftonicDownloader_for_ar-cad.exe  (64ce530671a43106e2725fdc519b12ac)

19 / 68    (PUP)
http://sd-cf.softonic.jp/75000/75742/.../SoftonicDownloader_for_batterybar.exe  (f3948d57f7985747c9a7c0073c2798db)

10 / 68    (Adware)
http://sd-cf.softonic.jp/28000/28009/.../SoftonicDownloader_for_rainmeter.exe  (98f27a8ab42e6e4973a9b84fa8a21ce9)

17 / 68    (Adware)
http://sd-cf.softonic.jp/57000/57475/.../SoftonicDownloader_for_dvd-flick.exe  (d73b8950632d1ab7f0c76ebdd0ecc7a0)

9 / 68      (Adware)
http://sd-cf.softonic.jp/19000/19825/.../SoftonicDownloader_for_filezilla.exe  (f2b21ce44cf5418c93135aa466e04500)

14 / 68    (Adware)
http://sd-cf.softonic.jp/59000/59875/.../SoftonicDownloader_for_orbit-downloader.exe  (22b8abeadada9f942aa8a3c4d0dbab79)

5 / 68      (PUP)
http://sd-cf.softonic.jp/107000/107429/.../SoftonicDownloader_for_freemake-video-downloader.exe  (1b6a117577792aa61c308a221609b386)

4 / 68      (Adware)
http://sd-cf.softonic.jp/26000/26102/.../SoftonicDownloader_for_rar-password-cracker.exe  (4207c3ed656ffa12d87d1bd22c97a322)

5 / 68      (Adware)
http://sd-cf.softonic.jp/303000/303489/.../SoftonicDownloader_for_dropbox.exe  (b1016c5f9cb05d5c946cc82270cdc43e)

7 / 68      (PUP)
http://sd-cf.softonic.jp/9000/9840/.../SoftonicDownloader_for_winzip.exe  (55ca463bfe6895e10b142fa70e371faa)

The following 76 files have been seen to comunicate with sd-cf.softonic.jp in live environments.

TCP » 54.192.36.69:80
yacqq.exe

TCP » 54.230.51.67:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.36.69:80
qkseeSvc.exe (qks by Qksee Pvt)

TCP » 54.230.51.67:80
interhop.exe

TCP » 54.230.37.65:443
jingling.exe

TCP » 54.230.37.93:443
apptrailers.exe

TCP » 54.230.37.151:80
browser.exe (speed browser by Smart Applications)

TCP » 54.230.51.67:80
mine-craft-setup.exe

TCP » 54.230.37.93:443
whatsapptime.exe

TCP » 54.230.38.200:443
dailywiki.exe

TCP » 54.192.36.69:80
yacqq.exe

TCP » 54.230.51.209:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.36.69:80
yacqq.exe

TCP » 54.230.37.93:80
dailywiki.exe

TCP » 54.230.37.65:443
online-guardian-v2.0.9.exe

TCP » 54.192.36.69:80
uvconverter.exe

TCP » 54.192.36.69:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.230.37.151:80
browser.exe (Browser)

TCP » 54.192.36.69:80
yacqq.exe

TCP » 54.192.36.69:80
uvconverter.exe

 
Latest 20 of 96 files

URL:
http://sd-cf.softonic.jp/

Network:
Amazon Cloudfront

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.