cdn.bigspeedpro.com

Somoto Ltd.  (via a Proxy Registrant)

Domain Information

The domain cdn.bigspeedpro.com is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2009. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Esfahan, Esfahan within Iran which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Somoto Ltd. who is located in Tel Aviv, Israel.
Registrar:
GODADDY.COM, LLC

Server location:
Esfahan, Iran (IR)

Create date:
Saturday, October 24, 2009

Expires date:
Monday, October 24, 2016

Updated date:
Saturday, October 17, 2015

ASN:
AS16265 LEASEWEB LeaseWeb B.V.

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (65% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Somoto.16, Tool.InstallToolbar.96, Adware.Plugin.11, Trojan.MulDrop3.50045, Adware.Zugo.49, Trojan.DownLoader5.48578, Trojan.AVKill.4051, Trojan.StartPage.62362
66.67%

Reason Heuristics
PUP.Installer.Somoto.S, PUP.AnchorFree.HSS.Installer.Meta (M), PUP.Optional.Installer.SmartTweakSoftware.P, PUP.Installer.BrandAffinityTechnologies.M
56.67%

Trend Micro House Call
ADW_SOMOTO, TROJ_GEN.R06H1EL, TROJ_GEN.F47V0723, TROJ_GEN.RCBOHHV, TROJ_GEN.RCBH2B7, TROJ_GEN.F43BZA9, TROJ_GEN.F47V1006, TROJ_GEN.USVTK10, TROJ_DLOADER.BMC, ADW_TOMOS, TROJ_GEN.R47H1A3
43.33%

ESET NOD32
Win32/Somoto, Win32/ELEX (variant), Win32/Adware.Yontoo (variant), Win32/Toolbar.Babylon, Win32/Toolbar.Babylon (variant)
40.00%

Comodo Security
ApplicUnsaf.Win32.FileFrog.w, Heur.Suspicious
20.00%

VIPRE Antivirus
Conduit, Yontoo, Babylon, Trojan.Win32.Generic
20.00%

Boost by Reason
Optional.Somoto.S, Optional.Conduit.Q, Adware.Installer.Babylon.K, Trojan.Adw.Zugo.N
16.67%

Bkav FE
W32.Clod9b1.Trojan, W32.OnGameECHJJ.Trojan, W32.Clodf7a.Trojan, W32.Clod7ce.Trojan
13.33%

Avira AntiVirus
APPL/Somoto.itz, APPL/Somoto.Gen2, TR/Agent.2383680
13.33%

Emsisoft Anti-Malware
Trojan.Win32.ELEX.AMN, Adware.Win32.ECOHET.AMN, Riskware.Win32.Toolbar.Zugo.AMN
13.33%

K7 AntiVirus
Riskware, Trojan
13.33%

Baidu Antivirus
Adware.Win32.Yontoo, threats.multiple, HackTool.Win32.CheatEngine, Trojan.Win32.Somoto
13.33%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Backdoor.Agent
13.33%

avast!
Win32:Somoto-J [PUP], Win32:Malware-gen
10.00%

Malwarebytes
PUP.Optional.Somoto.A, PUP.Optional.Babylon.A, PUP.Zugo
10.00%

The domain cdn.bigspeedpro.com has been seen to resolve to the following 4 IP addresses.

February 28, 2016

March 14, 2014

February 6, 2014

November 16, 2013

File downloads found at URLs served by cdn.bigspeedpro.com.

1 / 68      (inconclusive)

4 / 68      (inconclusive)

6 / 68      (Adware)
http://cdn.bigspeedpro.com/mirror/.../somoto-master.exe  (7a2a356b4aa8cfc7d34fac1ccc593c4a)

3 / 68      (inconclusive)
http://cdn.bigspeedpro.com/mirror/.../burn4free.exe  (7f5d845fe8afded5333db12bb4c8c027)

4 / 68      (Malware)
http://cdn.bigspeedpro.com/mirror/.../pivot_setup.exe  (bb6cd5126405d82fbf00673f043b29e2)

5 / 68      (inconclusive)
http://cdn.bigspeedpro.com/mirror/.../CheatEngine61.exe  (e1611b421306f324411134992b9c1beb)

2 / 68      (inconclusive)
http://cdn.bigspeedpro.com/mirror/.../facesmooch.exe  (bae9d0533d8ff81c418871906f54fbb6)

6 / 68      (Adware)
http://cdn.bigspeedpro.com/mirror/.../tempcleaner.exe  (229950c3342f5bed8d74d081783a4290)

6 / 68      (Adware)

1 / 68      (inconclusive)
http://cdn.bigspeedpro.com/mirror/.../layoutsexpress.exe  (99ea46c90b73fdc3c13407489cb1c5a7)

3 / 68      (inconclusive)

6 / 68      (Adware)
http://cdn.bigspeedpro.com/mirror/.../ether-z-silent.exe  (1795328bbaa50d5994d3ea372a88c136)

5 / 68      (Adware)

6 / 68      (Malware)

3 / 68      (Malware)

10 / 68    (Adware)
http://cdn.bigspeedpro.com/mirror/.../vzo-fytd-sntb.exe  (34453c061bd17ba60ce98de0bd653ba4)

5 / 68      (Adware)

8 / 68      (Adware)

3 / 68      (PUP)

3 / 68

7 / 68      (Adware)

4 / 68      (PUP)

3 / 68      (PUP)

15 / 68    (Adware)

1 / 68      (PUP)

2 / 68
http://cdn.bigspeedpro.com/mirror/.../asc5-setup-ker.exe  (5aa8305db6af22fbbebb09ea4360abb9)

1 / 68      (PUP)
http://cdn.bigspeedpro.com/mirror/.../UpdateMyDrivers.exe  (1a5688abcf267436aa6ebe1d476b1d06)

1 / 68      (PUP)