home

getinstall.org

Francis COHEN

Domain Information

The hosted servers are located in Paris, Ile-De-France within France which resides on the RIPE Network Coordination Centre network.
Registrar:
Gandi SAS

Server location:
Ile-De-France, France (FR)

ASN:
AS29169 GANDI-AS Gandi SAS

Whois:
2 getinstall.org records

The domain getinstall.org has been seen to resolve to the following IP address.

217.70.184.38
webredir.vip.gandi.net
September 21, 2015

The following 5 files have been seen to comunicate with getinstall.org in live environments.

TCP » 217.70.184.38:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.70.184.38:80
online-guardian-v2.0.9.exe

TCP » 217.70.184.38:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 217.70.184.38:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 217.70.184.38:587
www.exe

TCP » 217.70.184.38:25
www.exe

September 21, 2015
stapibrowser.getinstall.org

URL:
http://getinstall.org/

Title:
“getinstall.org”

Description:
“GANDI is a domain name registrar and cloud hosting company. Free website, SSL certificate, blog, and e-mail included. VPS dedicated virtual servers, cloud hosting.”

Web server:
BaseHTTP/0.3 Python/2.6.6

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.