download.cdn.koyotesoft.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain download.cdn.koyotesoft.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2006. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Texas, United States (US)

Create date:
Monday, December 18, 2006

Expires date:
Sunday, December 18, 2016

Updated date:
Sunday, November 1, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.KoyoteLab.FF, PUP.Installer.KoyoteLab.EE, PUP.Optional.Installer.Bandoo, PUP.Installer.KoyoteLab.b, PUP.Installer.KoyoteLab.DD, PUP.Bandoo.KoyoteLab.Installer (M), PUP.KoyoteLab.Installer.Meta (M), PUP.Bandoo.KoyoteLa.Installer (M), Win32.Generic, PUP.Bandoo (M)
97.62%

Dr.Web
Adware.Downware.942, BackDoor.Tordev.25, Adware.Downware.964, Adware.Searcher.2497, Adware.Bandoo.205, Adware.Bandoo.228, Adware.Bandoo.251, Adware.Bandoo.1
59.52%

Malwarebytes
PUP.Optional.Koyote.A, PUP.Optional.Bandoo.A
45.24%

ESET NOD32
Win32/Toolbar.SearchSuite (variant), Win32/KoyoteLab (variant), Win32/Toolbar.SearchSuite potentially unwanted, Win32/Toolbar.SearchSuite.W potentially unwanted
45.24%

Trend Micro House Call
TROJ_GEN.F47V0716, TROJ_GEN.F47V0717, TROJ_GEN.F47V0420, TROJ_GEN.F47V1001, HV_ZYX_CA082C65.TOMC, Suspicious_GEN.F47V0723, TROJ_GEN.F47V0822
38.10%

G Data
Win32.Adware.Bandoo, Win32.Application.Searchsuite, Win32.Application.KoyoteLab, NSIS.Application.SearchSuite
38.10%

AVG
Bandoomed, SearchSuite, Skodna.Generic
30.95%

McAfee
Artemis!95E976F5541F, Artemis!D1E90B72E8B1, Artemis!6AF3EF4C4658, Artemis!BB130A717AB0, Artemis!98684924E115, Artemis!8546F186AABE, Artemis!F11DD18EFDF1
28.57%

AhnLab V3 Security
Win-PUP/SearchSuite, ASD.Prevention
23.81%

Agnitum Outpost
Riskware.Agent, PUA.Bandoo
23.81%

NANO AntiVirus
Trojan.Win32.Downware.crewao, Riskware.Win32.Bandoo.dgnlaz, Riskware.Win32.Bandoo.dylvvx, Riskware.Win32.Bandoo.dydbig
19.05%

Bkav FE
W32.Clod709.Trojan, W32.Clod33d.Trojan, W32.Clod33b.Trojan, W32.HfsAdware
16.67%

K7 AntiVirus
Adware, Trojan , Unwanted-Program , Adware
16.67%

Rising Antivirus
PE:Trojan.Dropper!6.1BE, PE:AdWare.Win32.BearShare.b!1075356890, PE:Malware.Generic/QRS!1.9E2D [F]
14.29%

IKARUS anti.virus
PUA.Toolbar.SearchSuite, PUA.SearchSuite, PUA.Soffer
14.29%

The domain download.cdn.koyotesoft.com has been seen to resolve to the following 90 IP addresses.

a23-219-88-209.deploy.static.akamaitechnologies.com
August 25, 2016

a23-219-88-198.deploy.static.akamaitechnologies.com
August 25, 2016

a23-15-7-107.deploy.static.akamaitechnologies.com
July 7, 2016

a104-96-220-235.deploy.static.akamaitechnologies.com
May 16, 2016

a104-96-220-248.deploy.static.akamaitechnologies.com
May 16, 2016

May 16, 2016

May 16, 2016

a104-96-221-89.deploy.static.akamaitechnologies.com
May 16, 2016

a104-96-221-146.deploy.static.akamaitechnologies.com
May 16, 2016

a23-15-8-51.deploy.static.akamaitechnologies.com
April 21, 2016

a23-15-8-50.deploy.static.akamaitechnologies.com
April 21, 2016

a23-15-9-27.deploy.static.akamaitechnologies.com
April 21, 2016

a23-15-9-43.deploy.static.akamaitechnologies.com
April 21, 2016

a23-15-7-105.deploy.static.akamaitechnologies.com
April 18, 2016

April 8, 2016

April 8, 2016

a23-0-160-97.deploy.static.akamaitechnologies.com
April 5, 2016

a23-220-148-48.deploy.static.akamaitechnologies.com
March 3, 2016

a184-51-126-106.deploy.static.akamaitechnologies.com
February 28, 2016

a23-15-7-91.deploy.static.akamaitechnologies.com
February 28, 2016

a23-15-7-137.deploy.static.akamaitechnologies.com
February 28, 2016

a184-51-126-107.deploy.static.akamaitechnologies.com
February 22, 2016

a184-51-126-81.deploy.static.akamaitechnologies.com
February 22, 2016

a23-220-148-56.deploy.static.akamaitechnologies.com
February 7, 2016

a23-220-148-18.deploy.static.akamaitechnologies.com
February 4, 2016

a23-220-148-41.deploy.static.akamaitechnologies.com
February 4, 2016

a23-0-160-96.deploy.static.akamaitechnologies.com
February 2, 2016

a23-0-160-98.deploy.static.akamaitechnologies.com
February 2, 2016

October 29, 2015

October 29, 2015

 
Showing 30 of 90 IP Addresses

File downloads found at URLs served by download.cdn.koyotesoft.com.

1 / 68      (PUP)

7 / 68      (PUP)

18 / 68    (PUP)

1 / 68      (PUP)

14 / 68    (PUP)

14 / 68    (Adware)

9 / 68      (PUP)

3 / 68      (PUP)

1 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

4 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

10 / 68    (PUP)

7 / 68      (PUP)

3 / 68      (PUP)

7 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

8 / 68      (PUP)

3 / 68      (PUP)

11 / 68    (PUP)

1 / 68      (PUP)

 
Latest 30 of 351 download URLs

The following 929 files have been seen to comunicate with download.cdn.koyotesoft.com in live environments.

 
Latest 20 of 1,010 files

URL:
http://download.cdn.koyotesoft.com/

Web server:
AkamaiGHost