cdn.bigspeedpro.com

Somoto Ltd.  (via a Proxy Registrant)

Domain Information

The domain cdn.bigspeedpro.com is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2009. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Esfahan, Esfahan within Iran which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Somoto Ltd. who is located in Tel Aviv, Israel.
Remove Malware from cdn.bigspeedpro.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Esfahan, Iran (IR)

Create date:
Saturday, October 24, 2009

Expires date:
Friday, October 24, 2014

Updated date:
Wednesday, August 14, 2013

ASN:
AS16265 LEASEWEB LeaseWeb B.V.

Root domain:

Scanner detections:
Detections  (70% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Somoto.16, Tool.InstallToolbar.96, Adware.Plugin.11, Trojan.MulDrop3.50045, Adware.Zugo.49, Trojan.DownLoader5.48578
64.00%

Reason Heuristics
PUP.Installer.Somoto.S, PUP.Optional.Installer.SmartTweakSoftware.P, PUP.Installer.BrandAffinityTechnologies.M, PUP.IncrediMail.Installer.Installer.Meta (L)
60.00%

ESET NOD32
Win32/Somoto, Win32/ELEX (variant), Win32/Adware.Yontoo (variant), Win32/Toolbar.Babylon, Win32/Toolbar.Babylon (variant)
48.00%

Trend Micro House Call
ADW_SOMOTO, TROJ_GEN.R06H1EL, TROJ_GEN.F47V0723, TROJ_GEN.RCBOHHV, TROJ_GEN.RCBH2B7, TROJ_GEN.F43BZA9, TROJ_GEN.F47V1006, TROJ_GEN.USVTK10, TROJ_DLOADER.BMC
44.00%

Comodo Security
ApplicUnsaf.Win32.FileFrog.w, Heur.Suspicious
24.00%

VIPRE Antivirus
Conduit, Yontoo, Babylon, Trojan.Win32.Generic
24.00%

Boost by Reason
Optional.Somoto.S, Optional.Conduit.Q, Adware.Installer.Babylon.K, Trojan.Adw.Zugo.N
20.00%

Avira AntiVirus
APPL/Somoto.itz, APPL/Somoto.Gen2, TR/Agent.2383680
16.00%

Emsisoft Anti-Malware
Trojan.Win32.ELEX.AMN, Adware.Win32.ECOHET.AMN, Riskware.Win32.Toolbar.Zugo.AMN
16.00%

K7 Gateway Antivirus
Riskware, Trojan
16.00%

K7 AntiVirus
Riskware, Trojan
16.00%

Baidu Antivirus
Adware.Win32.Yontoo, threats.multiple, HackTool.Win32.CheatEngine, Trojan.Win32.Somoto
16.00%

eSafe
Win32.Toolbar.Zugo.A, Win32.Trojan, Win32.Artemis, Win32.TRAgent
16.00%

Bkav FE
W32.Clod9b1.Trojan, W32.OnGameECHJJ.Trojan, W32.Clodf7a.Trojan
12.00%

Malwarebytes
PUP.Optional.Somoto.A, PUP.Optional.Babylon.A, PUP.Zugo
12.00%

The domain cdn.bigspeedpro.com has been seen to resolve to the following 3 IP addresses.

March 14, 2014

February 6, 2014

November 16, 2013

File downloads found at URLs served by cdn.bigspeedpro.com.

6 / 68      (Malware)
http://cdn.bigspeedpro.com/mirror/.../pivot_setup.exe  (bb6cd5126405d82fbf00673f043b29e2)

7 / 68      (PUP)
http://cdn.bigspeedpro.com/mirror/.../CheatEngine61.exe  (e1611b421306f324411134992b9c1beb)

7 / 68      (PUP)

2 / 68      (inconclusive)
http://cdn.bigspeedpro.com/mirror/.../facesmooch.exe  (bae9d0533d8ff81c418871906f54fbb6)

7 / 68      (Adware)
http://cdn.bigspeedpro.com/mirror/.../tempcleaner.exe  (229950c3342f5bed8d74d081783a4290)

6 / 68      (Adware)

2 / 68      (inconclusive)
http://cdn.bigspeedpro.com/mirror/.../layoutsexpress.exe  (99ea46c90b73fdc3c13407489cb1c5a7)

3 / 68      (inconclusive)

6 / 68      (Adware)
http://cdn.bigspeedpro.com/mirror/.../ether-z-silent.exe  (1795328bbaa50d5994d3ea372a88c136)

5 / 68      (Adware)

7 / 68      (Malware)

3 / 68      (Malware)

12 / 68    (Adware)
http://cdn.bigspeedpro.com/mirror/.../vzo-fytd-sntb.exe  (34453c061bd17ba60ce98de0bd653ba4)

0 / 68
http://cdn.bigspeedpro.com/mirror/.../CheatEngine61.exe  (e320ecfa26065439cabb4a91865ad93e)

5 / 68      (Adware)

9 / 68      (Adware)

5 / 68      (PUP)

3 / 68

7 / 68      (Adware)

5 / 68      (PUP)

5 / 68      (PUP)

18 / 68    (Adware)

1 / 68      (PUP)

2 / 68
http://cdn.bigspeedpro.com/mirror/.../asc5-setup-ker.exe  (5aa8305db6af22fbbebb09ea4360abb9)

1 / 68      (PUP)
http://cdn.bigspeedpro.com/mirror/.../UpdateMyDrivers.exe  (1a5688abcf267436aa6ebe1d476b1d06)

URL:
http://cdn.bigspeedpro.com/

Google Analytics:
UA-7174924

Title:
“Homepage”

Web server:
nginx

Alexa:
Global rank:  660,174
Backlinks:  423

Statistics are for the previous month (Alexa statistics are for entire bigspeedpro.com).

Remove Malware from cdn.bigspeedpro.com - Powered by Reason Core Security