» files4.softreviews.co
Overview
Analysis
IPs Addresses (38)
Downloads (76)
Network (683)
Related Domains (5)

files4.softreviews.co

Download Admin

Domain Information

The domain files4.softreviews.co was initially registered in April of 2013 and originally registered through ENOM, INC.. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Reston, Virginia within the United States which resides on the Tiggee LLC network. The domain is part of a DNS service that utilizes a number of reverse proxy IP Addresses (see below). The domain is associated with the publisher Download Admin who is located in SAN FRANCISCO, California in the United States.

Registrant:

- for Download Admin

Registrar:

ENOM, INC.

Server location:

Virginia, United States (US)

Create date:

Tuesday, April 2, 2013

Expires date:

Friday, April 1, 2016

Updated date:

Thursday, December 10, 2015

ASN:

AS16552 TIGGEE - Tiggee LLC, US

Root domain:

softreviews.co

Whois:

5 softreviews.co records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.DownloadAdmin.N, PUP.Installer.DownloadAdmin.S, PUP.Installer.DownloadAdmin.T, PUP.Installer.DownloadAdmin.O, PUP.Installer.DownloadAdmin.Z, PUP.Installer.DownloadAdmin.V, PUP.Installer.DownloadAdmin.P, PUP.Installer.DownloadAdmin.R, PUP.Installer.DownloadAdmin.U, PUP.Installer.DownloadAdmin.M, PUP.Installer.Tightrope, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.Tightrope.Download.Bundler (M), PUP.Tightrope (M)

100.00%

Dr.Web

Adware.Downware.2220, Adware.DAdmin.151

31.43%

VIPRE Antivirus

DownloadAdmin, Threat.4783369

31.43%

Sophos

Download Admin

25.71%

Malwarebytes

PUP.Optional.DownloadAdmin

22.86%

Comodo Security

Application.Win32.DownloadAdmin.TTK, ApplicUnwnt

22.86%

NANO AntiVirus

Trojan.Win32.Downware.crgjbr, Riskware.Win32.Downware.crgjbr

20.00%

ESET NOD32

Win32/DownloadAdmin

20.00%

herdProtect (fuzzy)

a variant of 6022b3ba0448a06257546bab35aa43f8bc38361c, a variant of 59d1bf9a3f8f10638351a61157e571e75821ff65, a variant of 1800caccbeabae168e52c54df129af76ac430d4e

17.14%

AVG

Generic, MalSign.InstallC

14.29%

Avira AntiVirus

ADWARE/Adware.Gen

11.43%

ESET NOD32

Win32/DownloadAdmin.G potentially unwanted application

11.43%

Agnitum Outpost

Riskware.Agent

11.43%

F-Secure

Adware:W32/WebInstallBundle

11.43%

McAfee

Artemis!5726256FCFA7

11.43%

The domain files4.softreviews.co has been seen to resolve to the following 38 IP addresses.

96.45.83.110

redirection.dnsmadeeasy.com

August 26, 2016

96.45.82.151

redirection.dnsmadeeasy.com

August 26, 2016

96.45.82.92

redirection.dnsmadeeasy.com

August 26, 2016

96.45.83.206

redirection.dnsmadeeasy.com

August 26, 2016

23.15.7.97

a23-15-7-97.deploy.static.akamaitechnologies.com

May 20, 2016

104.112.235.19

a104-112-235-19.deploy.static.akamaitechnologies.com

May 18, 2016

104.96.220.233

a104-96-220-233.deploy.static.akamaitechnologies.com

May 18, 2016

104.96.220.226

a104-96-220-226.deploy.static.akamaitechnologies.com

May 16, 2016

104.96.220.225

a104-96-220-225.deploy.static.akamaitechnologies.com

May 16, 2016

104.96.220.216

a104-96-220-216.deploy.static.akamaitechnologies.com

May 16, 2016

104.96.220.193

a104-96-220-193.deploy.static.akamaitechnologies.com

May 16, 2016

104.96.220.227

a104-96-220-227.deploy.static.akamaitechnologies.com

May 16, 2016

23.0.160.98

a23-0-160-98.deploy.static.akamaitechnologies.com

February 28, 2016

23.0.160.88

a23-0-160-88.deploy.static.akamaitechnologies.com

February 28, 2016

23.220.148.19

a23-220-148-19.deploy.static.akamaitechnologies.com

February 23, 2016

23.220.148.33

a23-220-148-33.deploy.static.akamaitechnologies.com

February 23, 2016

23.15.7.105

a23-15-7-105.deploy.static.akamaitechnologies.com

February 8, 2016

23.15.7.120

a23-15-7-120.deploy.static.akamaitechnologies.com

February 8, 2016

184.26.44.103

a184-26-44-103.deploy.static.akamaitechnologies.com

May 3, 2015

184.26.44.98

a184-26-44-98.deploy.static.akamaitechnologies.com

May 3, 2015

23.67.243.59

a23-67-243-59.deploy.static.akamaitechnologies.com

May 2, 2015

23.15.9.58

a23-15-9-58.deploy.static.akamaitechnologies.com

December 1, 2014

23.15.9.18

a23-15-9-18.deploy.static.akamaitechnologies.com

December 1, 2014

23.62.6.66

a23-62-6-66.deploy.static.akamaitechnologies.com

December 1, 2014

23.62.6.59

a23-62-6-59.deploy.static.akamaitechnologies.com

December 1, 2014

184.51.126.56

a184-51-126-56.deploy.static.akamaitechnologies.com

December 1, 2014

184.51.126.32

a184-51-126-32.deploy.static.akamaitechnologies.com

December 1, 2014

23.0.160.72

a23-0-160-72.deploy.static.akamaitechnologies.com

September 4, 2014

23.0.160.11

a23-0-160-11.deploy.static.akamaitechnologies.com

September 3, 2014

23.0.160.65

a23-0-160-65.deploy.static.akamaitechnologies.com

September 3, 2014

Showing 30 of 38 IP Addresses

File downloads found at URLs served by files4.softreviews.co.

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_CutePDF_CCROW&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845381&country=SD&cb=-1513810172 (cutepdfwriter-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_CCUS_All_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=846549&country=US&cb=568086471 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_CCUS_All_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=995552&country=US&cb=-1656026029&zTmp=1 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=846549&country=US&cb=1091084070 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_UK_Exact_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=995552&country=GB&cb=-1702020359&zTmp=1 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google_content&c=SoftRev_SpiderSolitaire_CCUS_Content&variation=Variant2&brand=SoftReviews.co&pid=TR&bc=1082454&country=US&cb=-810115103&zTmp=1 (spidersolitaire-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_UK_Exact_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=995552&country=GB&cb=1465756189 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google_content&c=SoftRev_Minecraft_CCUS_Content&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=842899&country=US&cb=1475127135 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_StartButton8_CCROW&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845425&country=ZA&cb=-1532706631 (startbutton8-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google_content&c=SoftRev_StartButton8_CCUS_Content&variation=secure&brand=SoftReviews.co&pid=TR&bc=1101730&country=US&cb=224474066&zTmp=1 (classicshell-setup.exe)

14 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_Spybot_CCUS_Tree&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=951489&country=US&cb=-2127208320&zTmp=1 (spybot-setup.exe)

14 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_Spybot_CCUS_Tree&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=951489&country=US&cb=1466765901&zTmp=1 (spybot-setup.exe)

7 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_TinyUmbrella_CCCA&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845377&country=CA&cb=-590720098 (tinyumbrella-setup.exe)

15 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_Minecraft_CCUS_Tree&variation=secure&brand=SoftReviews.co&pid=TR&bc=842899&country=US&cb=57981882&zTmp=1 (minecraft-setup.exe)

15 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_Minecraft_CCUS_Tree&variation=secure&brand=SoftReviews.co&pid=TR&bc=842899&country=US&cb=-969207711&zTmp=1 (minecraft-setup.exe)

15 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_Minecraft_CCUS_Tree&variation=secure&brand=SoftReviews.co&pid=TR&aid=compsimgames&bc=842899&country=US&cb=855089061&zTmp=1 (minecraft-setup.exe)

14 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_IMGBurn_CCUS_Content2&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=1081990&country=US&cb=-1649115020&zTmp=1 (imgburn-setup.exe)

9 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_HappyWheels_CCUS_Phrase&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845369&country=US&cb=-2022668859 (happywheels-setup.exe)

9 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_HappyWheels_CCUS_Phrase&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845369&country=US&cb=1028672192 (happywheels-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_IMGBurn_CCUS_Content2&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=1081994&country=US&cb=-941047034&zTmp=1 (imgburn-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_CutePDF_CCCA&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=1084078&country=CA&cb=496867929&zTmp=1 (cutepdfwriter-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google_content&c=SoftRev_Minecraft_CCUS_Content&variation=secure&brand=SoftReviews.co&pid=TR&bc=842899&country=US&cb=-1382881421&zTmp=1 (minecraft-setup.exe)

7 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_CCUS_All_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=846549&country=US&cb=-981148666 (minecraft-setup.exe)

7 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_CCUS_All_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=846549&country=US&cb=-1369376954 (minecraft-setup.exe)

7 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Bing&c=SoftRev_Minecraft_CCUS_All_Bing&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=846549&country=US&cb=1346743142 (minecraft-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=google&c=SoftRev_StartButton8_CCUS_Broad&variation=secure&brand=SoftReviews.co&pid=TR&bc=1082446&country=US&cb=-303655547&zTmp=1 (startbutton8-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_Bandicam_CCUS_Tree&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845409&country=US&cb=-253730518 (bandicam-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_IMGBurn_CCUS_Content2&variation=saveas-all&brand=SoftReviews.co&pid=TR&bc=845421&country=US&cb=536280512 (imgburn-setup.exe)

1 / 68 (Adware)

http://files4.softreviews.co/download/.../dl?s=Google&c=SoftRev_Minecraft_CCUS_Tree&variation=saveas-all&brand=SoftReviews.co&pid=TR&aid=minecraft&bc=842899&country=US&cb=-289295734 (minecraft-setup.exe)

1 / 68 (Adware)

Latest 30 of 76 download URLs

The following 683 files have been seen to comunicate with files4.softreviews.co in live environments.

TCP » 184.26.44.103:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.112.235.19:80

TBNotifier.exe (Ask TBNotifier by APN)

TCP » 184.26.44.98:80

cpx.exe (Google Embedded Application)

TCP » 184.26.44.103:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.98:443

dailywiki.exe

TCP » 23.15.9.18:80

browser.exe (Browser)

TCP » 184.26.44.98:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.56:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.103:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.26.44.103:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.15.7.97:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 184.26.44.98:80

dailywiki.exe

TCP » 184.26.44.98:80

apptrailers.exe

TCP » 184.51.126.56:80

new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 23.15.7.105:80

whatsapptime.exe

TCP » 104.112.235.19:443

browser.exe (Browser)

TCP » 184.26.44.98:80

utilfasterlight.exe

TCP » 23.15.7.97:80

browser.exe (Browser)

TCP » 23.15.9.58:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.32:443

UCBrowser.exe (UC Browser by UCWeb)

Latest 20 of 706 files

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.