» soft169.org
Overview
Analysis
IPs Addresses (2)
Downloads (14)
Network (8)
Website Detail
Related Domains (44)

soft169.org

Ivan Zaycev

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Ivan Zaycev

Registrar:

GoDaddy.com, LLC (R91-LROR)

Server location:

Arizona, United States (US)

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Whois:

2 soft169.org records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.OOO.R, PUP.Bundler.installCore, PUP.Installer (M), PUP (M)

100.00%

Malwarebytes

PUP.Optional.InstallCore, PUP.Optional.TehSnab

21.43%

ESET NOD32

Win32/InstallCore.UQ potentially unwanted application, Win32/InstallCore.QF potentially unwanted application

14.29%

Dr.Web

Trojan.InstallCore.27, Trojan.InstallCore.38

14.29%

VIPRE Antivirus

Threat.4786018, Threat.4150696

14.29%

Bkav FE

W32.HfsAdware

14.29%

K7 AntiVirus

Trojan

14.29%

NANO AntiVirus

Riskware.Win32.InstallCore.djeebz, Riskware.Win32.InstallCore.dmfojt

14.29%

Avira AntiVirus

ADWARE/InstallCore.Gen, Adware/InstallCore.rfaw

14.29%

AVG

Generic, Generic11_c

14.29%

ESET NOD32

Win32/InstallCore.QL (variant)

7.14%

Sophos

PUA 'Install Core Click run software'

7.14%

Total Defense

Win32/Tnega.JbTPVR

7.14%

Agnitum Outpost

PUA.InstallCore

7.14%

Comodo Security

Application.Win32.InstallCore.RFAW

7.14%

The domain soft169.org has been seen to resolve to the following 2 IP addresses.

184.168.221.44

ip-184-168-221-44.ip.secureserver.net

February 11, 2015

199.115.114.52

October 9, 2014

File downloads found at URLs served by soft169.org.

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122103077282&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=11665631871412210307&pubid=199526&c=20a4febe59cb94a853d80a5d31ff8739&v_id=5e95c3e3c44568025a5a75f1d528a0d2 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122151024110&site_id=406&app_id=4&lp_id=381&v=ico&dist_id=251&channel=mrkfp&dast=Ym89MiZzbGlkPTAmc3ViaWQ9MjAwMTQ1MTIyNTE3MDAwMDAwJnNvPTImY2ljbXA9MzkwMTM4JnB1YmlkPTUzMTcyJmNpcGlkPTIwMjIwMjAmY2lzaWQ9QzA2Nzg0ODgxNjY5ODIxNTEwNTk5MjM1MTYmY2lyaWQ9QzA2Nzg0ODgxNjY5ODIxNjI5NDMzMjQzMSZjaXVpZD01MzYxNzQxNzQ0MTEzMzUxNTY1JmNyaWQ9MjY3NDA0OCZleGNpZD0yMiZtbXQ9LTEmY250cnk9MjI3&c=6dd2878b1b3d78d34d994bf541e3b4ab&v_id=6ee57ea3343c7029076178a29e1c4321 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122255498491&site_id=406&app_id=96&lp_id=331&v=ico&dist_id=250&channel=mrkmp&dast=Ym89MiZjaXBpZD0yMDIyMDIwJmNpc2lkPTRFQjMxQzdENTc0NzI2NzEzODY3NDcyNCZjaXJpZD00RUIzMUM3RDU3NDcyNjgxNjIzNjUxMzI1JnNsaWQ9MCZzdWJpZD0yMDAwODkwMjI1MTMwMDAwMDAmY2l1aWQ9LTkwMTgyNTE0NTMzNzYwMTg0NDEmc289MiZjcmlkPTI2NzQ4MzgmZXhjaWQ9MjImbW10PS0xJmNudHJ5PTIyNyZjaWNtcD0zOTAxMzgmcHViaWQ9NDkwODg=&c=2f854453c0fa7351c5c2d29dbe0c8fd9&v_id=f912e205f7333e644cf9af790e591047 (mediaplayer_update.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122261742193&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=29426691041412226173&pubid=259581&c=20a4febe59cb94a853d80a5d31ff8739&v_id=57955e4da949d8f2f8901e4c05268e61 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122242251113&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=ube9682e1516cd35822ed6b5215&pubid=151107&c=20a4febe59cb94a853d80a5d31ff8739&v_id=51e0c1f4d8ccdb4450234d1cd189f80c (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122089216601&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=4117056751412208921&pubid=199526&c=20a4febe59cb94a853d80a5d31ff8739&v_id=da0790717d6c46e24f51665d36f8fcca (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122717935776&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=251&channel=mrkfp&dast=Ym89MiZjaXBpZD0yMDIyMDIwJmNpc2lkPTM4NDRCRENEMTA5MTUwNTk5NTU1OTUyODEmY2lyaWQ9Mzg0NEJEQ0QxMDkxNTA2MDEzNTkzOTIzNDAmc2xpZD0wJnN1YmlkPTIwMDE2NzMyMjUyMDAwMDAwMCZjaXVpZD0tODAwOTA4ODY4ODkxOTE5MDU2MSZzbz0yJmNyaWQ9MjU3NDMyOCZleGNpZD0yMiZtbXQ9LTEmY250cnk9MjI3JmNpY21wPTM1MTU5OCZwdWJpZD02MTc5OQ==&c=6dd2878b1b3d78d34d994bf541e3b4ab&v_id=4a44c4ec2e7363353e360dca85402fb5 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122164630700&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=12211812521412216462&pubid=237950&c=20a4febe59cb94a853d80a5d31ff8739&v_id=a0f8c6cf4ad987b77da60255a468f6c3 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122706538044&site_id=406&app_id=4&lp_id=381&v=ico&dist_id=251&channel=mrkfp&dast=Ym89MiZzbGlkPTAmc3ViaWQ9MjAwMDk3MjIyNTE2MDAwMDAwJnNvPTImY2ljbXA9MzkwMTM4JnB1YmlkPTUwMzY4JmNpcGlkPTIwMjIwMjAmY2lzaWQ9Rjg0MkQyMTRGRDkyNzY4MzE4NTkwMDc1NzkmY2lyaWQ9Rjg0MkQyMTRGRDkyNzY4NDIwNzQzMjcyNzAmY2l1aWQ9LTcyNDY5MTcxMzgzODcyNjkzOTUmY3JpZD0yNjc0MDQ4JmV4Y2lkPTIyJm1tdD0tMSZjbnRyeT0yMjc=&c=6dd2878b1b3d78d34d994bf541e3b4ab&v_id=3f12adc1eb57b25b7fbd4be680beac8a (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122124916811&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=11753894941412212491&pubid=322028&c=20a4febe59cb94a853d80a5d31ff8739&v_id=9ef33c7c3fadb5e654a88fba3f6d1f3a (adobe_flash_setup.exe)

1 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122237288588&site_id=406&app_id=4&lp_id=106&v=ico&dist_id=10&channel=gungo-flash-1&subid=S0001732&c=b7e5541cde2645caec88d444699659fb&v_id=30b9db7d078da28bba06b87380a9f0e0 (adobe_flash_setup.exe)

13 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122241441489&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=11421005171412224141&pubid=117290&c=20a4febe59cb94a853d80a5d31ff8739&v_id=51e0c1f4d8ccdb4450234d1cd189f80c (adobe_flash_setup.exe)

11 / 68 (Adware)

3 / 68 (Adware)

http://soft169.org/download.php?conversion_id=14122098895452&site_id=406&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=11653050821412209874&pubid=151018&c=20a4febe59cb94a853d80a5d31ff8739&v_id=d770b5d4a45d11231265126b619870d1 (adobe_flash_setup.exe)

The following 8 files have been seen to comunicate with soft169.org in live environments.

TCP » 184.168.221.44:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.44:80

PennyBeeW.exe (PennyBee)

TCP » 184.168.221.44:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.44:25

www.exe

TCP » 184.168.221.44:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 184.168.221.44:587

wrk.exe

TCP » 184.168.221.44:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.44:80

obronablockads.exe (Obrona Block Ads by RedSky Sp. z o.o)

URL:

http://soft169.org/

Web server:

Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

Related Domains

combosoftwarelists.com

csstablegenerator.com

d0wnpzivrubajjui.com

darkstarrisen.com

ddllpmedia.info

downloadahceiduphoth.com

downloadingthefiles.com

easterninternet.info

epicdevelop.info

f1l3ohqimjjedf0jq.com

file13desktop.com

file8desktop.com

files-download-103.com

my-apps-repository.com

mydatastatssrv.com

pldownloads.com

project-bearshare.com

pruprotection.co.uk

30 of 44 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.