sub.disheritance.info

SITE ON SPOT Ltd.

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GoDaddy.com, LLC (R171-LRMS)

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.SITEONSPOT.Y
100.00%

ESET NOD32
Win32/Somoto.G potentially unwanted application
100.00%

VIPRE Antivirus
Threat.4783461
100.00%

MicroWorld eScan
Application.Bundler.Somoto.J
100.00%

McAfee
Somoto-BetterInstaller
100.00%

Malwarebytes
PUP.Optional.Somoto.A
100.00%

NANO AntiVirus
Riskware.Nsis.Adware.dbnhrj
100.00%

Clam AntiVirus
Win.Trojan.Agent-751031
100.00%

Kaspersky
not-a-virus:AdWare.Win32.Agent
100.00%

Bitdefender
Application.Bundler.Somoto.J
100.00%

Lavasoft Ad-Aware
Application.Bundler.Somoto.J
100.00%

Sophos
Somoto BetterInstaller
100.00%

F-Secure
Application.Bundler.Somoto.J
100.00%

Emsisoft Anti-Malware
Application.Bundler.Somoto
100.00%

Baidu Antivirus
Adware.Win32.Agent
100.00%

The domain sub.disheritance.info has been seen to resolve to the following 8 IP addresses.

server-54-230-38-142.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-38-135.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-38-23.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-38-39.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-38-114.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-39-61.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-38-124.jfk1.r.cloudfront.net
July 10, 2014

server-54-230-38-111.jfk1.r.cloudfront.net
July 10, 2014

File downloads found at URLs served by sub.disheritance.info.

The following 3 files have been seen to comunicate with sub.disheritance.info in live environments.

URL:
http://sub.disheritance.info/

Google Analytics:
UA-31676879

Title:
“Better Installer - Cloud Based Installation Platform”

Description:
“BetterInstaller is a Cloud Based Installation Platform. Nsis , InnoSetup Welcomed!”

Network:
Amazon Cloudfront

Web server:
nginx