» koyotsoft.org
Overview
Analysis
IPs Addresses (2)
Downloads (19)
Network (8)
Website Detail
Related Domains (42)

koyotsoft.org

Ivan Zaycev

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Ivan Zaycev

Registrar:

GoDaddy.com, LLC (R91-LROR)

Server location:

Arizona, United States (US)

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Whois:

3 koyotsoft.org records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.OOOAlians.R, PUP.installCore.OOOAlians.Installer (M), PUP.installCore.OOODIGITALVEI.Installer (M), PUP.installCore.OOOAlian.Installer (M), PUP.installCore (M)

100.00%

Kaspersky

not-a-virus:AdWare.Win32.InstallCore

26.32%

ESET NOD32

Win32/InstallCore.QC potentially unwanted application

26.32%

Malwarebytes

PUP.Optional.Installcore

26.32%

avast!

PUP-gen [PUP]

21.05%

K7 AntiVirus

Trojan , Unwanted-Program

21.05%

Avira AntiVirus

Adware/InstallCore.c.4

21.05%

AVG

Generic

21.05%

VIPRE Antivirus

Threat.4150696

21.05%

Zillya! Antivirus

Adware.InstallCore.Win32.258

21.05%

Comodo Security

Application.Win32.Installcore.QC

21.05%

Vba32 AntiVirus

Malware-Cryptor.InstallCore.gen

15.79%

nProtect

Trojan-Clicker/W32.InstallCore.780552

15.79%

IKARUS anti.virus

PUA.Alians

10.53%

Clam AntiVirus

Win.Adware.Installcore-567

5.26%

The domain koyotsoft.org has been seen to resolve to the following 2 IP addresses.

184.168.221.44

ip-184-168-221-44.ip.secureserver.net

November 10, 2014

207.244.83.59

September 13, 2014

File downloads found at URLs served by koyotsoft.org.

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=19768325091410098385&pubid=193068&c=20a4febe59cb94a853d80a5d31ff8739&v_id=cefa61d06958f14dafce53b5ae2c9334 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=20575066091410158237&pubid=62187&c=20a4febe59cb94a853d80a5d31ff8739&v_id=08ae0aa650c380f40ae986734892dfee (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=11218717891410087059&pubid=125524&c=20a4febe59cb94a853d80a5d31ff8739&v_id=e4137f838f1d0bb8a173d7f3e678fdbd (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=14539200321410091136&pubid=205635&c=20a4febe59cb94a853d80a5d31ff8739&v_id=27f83be0c698a4283ffdab50150c1edd (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=93&v=ico&dist_id=10&channel=gungo-flash-1&subid=S0001732&c=b7e5541cde2645caec88d444699659fb&v_id=de3b5ee4db7642eb4587b36784b7a787 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=u440883db52be5b526cfe86247d&pubid=155066&c=20a4febe59cb94a853d80a5d31ff8739&v_id=730fe52345dce2e01a193ee8ffb0fa64 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=31560596111410202266&pubid=151018&c=20a4febe59cb94a853d80a5d31ff8739&v_id=47306be8aff5e8749f1479259b0cbc44 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=35851412621410205636&pubid=195431&c=20a4febe59cb94a853d80a5d31ff8739&v_id=4cb03d8be2f810c88d246421ee5bed1a (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=381263681410181424&pubid=316087&c=20a4febe59cb94a853d80a5d31ff8739&v_id=dd62b2967d860c703fb4469b1ceaee1c (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=14824092911410107428&pubid=274850&c=20a4febe59cb94a853d80a5d31ff8739&v_id=cc2ebf3e73fb9c104a2652942f852beb (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=17972066631410053594&pubid=316583&c=20a4febe59cb94a853d80a5d31ff8739&v_id=7f2169386e692293be3fa25f91096216 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=11&lp_id=42&v=ico&dist_id=141&channel=achrfb141&src=ac&cid=14090920911410022970&pubid=232685&c=71d4a7d0c2b891fcc27bc8146b876965&v_id=027716df0f1199f6c78f44f3b39a9244 (facebook_messenger_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=12366761831410100558&pubid=194974&c=20a4febe59cb94a853d80a5d31ff8739&v_id=0f21ed1e8d08464c42e89219dfd11e59 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=u93c26d6253fc7c97732471550b&pubid=260628&c=20a4febe59cb94a853d80a5d31ff8739&v_id=3ce4c160a5fae7bffae7e526676d91ec (adobe_flash_setup.exe)

5 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=4037384951410120064&pubid=310908&c=20a4febe59cb94a853d80a5d31ff8739&v_id=b1d87d3f27c128b69b59a9cafed27db9 (adobe_flash_setup.exe)

14 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=16351938721410165238&pubid=172546&c=20a4febe59cb94a853d80a5d31ff8739&v_id=5d96c289d5666aa15d1ebe36bf681bfd (adobe_flash_setup.exe)

13 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=13495725251410164565&pubid=259581&c=20a4febe59cb94a853d80a5d31ff8739&v_id=c33ebf203f4fe71b53fed95887fd9ecb (adobe_flash_setup.exe)

14 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=25367559531410132413&pubid=245363&c=20a4febe59cb94a853d80a5d31ff8739&v_id=271072f0ca0d50873e5d9e1a16fafddf (adobe_flash_setup.exe)

13 / 68 (Adware)

http://koyotsoft.org/download.php?site_id=285&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=14111549011410096038&pubid=316087&c=20a4febe59cb94a853d80a5d31ff8739&v_id=d4345d9c805c57df6ba3ac3f84d3f731 (adobe_flash_setup.exe)

The following 8 files have been seen to comunicate with koyotsoft.org in live environments.

TCP » 184.168.221.44:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.44:80

PennyBeeW.exe (PennyBee)

TCP » 184.168.221.44:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.44:25

www.exe

TCP » 184.168.221.44:80

ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 184.168.221.44:587

wrk.exe

TCP » 184.168.221.44:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.44:80

obronablockads.exe (Obrona Block Ads by RedSky Sp. z o.o)

URL:

http://koyotsoft.org/

Web server:

Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

Related Domains

combosoftwarelists.com

csstablegenerator.com

d0wnpzivrubajjui.com

darkstarrisen.com

ddllpmedia.info

downloadahceiduphoth.com

downloadingthefiles.com

easterninternet.info

epicdevelop.info

f1l3ohqimjjedf0jq.com

file13desktop.com

file8desktop.com

files-download-103.com

my-apps-repository.com

mydatastatssrv.com

pldownloads.com

project-bearshare.com

pruprotection.co.uk

randkeygen.com

30 of 42 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.