dl.hcuoteno.com

franck rosset

Domain Information

The domain dl.hcuoteno.com registered by franck rosset was initially registered in June of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Thursday, June 12, 2014

Expires date:
Sunday, June 12, 2016

Updated date:
Monday, June 29, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.TUTO4PCCOMINTERNATIONALSL.N, PUP.TUTO4PCCOMINTERNATIONALSL.N, PUP.Installer.TUTO4PCCOMINTERNATIONALSL.M, PUP.TUTO4PCCOMINTERNATIONALSL.K, PUP.Eorezo.TUTO4PCCOMINTERNATIONAL.Installer (M), PUP.Eorezo.TUTO4PCC.Installer (M)
100.00%

VIPRE Antivirus
Tuto4PC, Threat.4895339, Threat.4739248
94.00%

avast!
Win32:Eorezo-CN [PUP], Win32:Eorezo-CM [PUP], Win32:Eorezo-CU [PUP], Win32:Eorezo-DA [PUP], Win32:Eorezo-CX [PUP], Win32:Adware-ASG [PUP]
86.00%

Dr.Web
Adware.Eorezo.31, Adware.Downware.10585, Adware.Eorezo.31, Adware.Eorezo.413
78.00%

Baidu Antivirus
Adware.Win32.EoRezo, Trojan.Win32.EoRezo
76.00%

Sophos
Generic PUA KL, Generic PUA KC, PUA 'Eorezo' (of type Adware), TUTO4PC, EoRezo Adware, Generic PUA CE, PUA 'TUTO4PC'
72.00%

AVG
Generic5
64.00%

ESET NOD32
multiple threats, Win32/AdWare.EoRezo.AU application
50.00%

ESET NOD32
Win32/Adware.EoRezo.AJ (variant), Win32/AdWare.EoRezo.AU (variant)
46.00%

NANO AntiVirus
Riskware.Win32.EoRezo.dbtxkn, Riskware.Win32.Graftor.dbzums, Riskware.Win32.Graftor.ddmsmm, Riskware.Win32.EoRezo.dbsheq, Riskware.Win32.EoRezo.deinxv
26.00%

McAfee
Artemis!A46939E3CA38, Artemis!6B3279FB931B, Artemis!42964E633E27, Trojan.Artemis!87E0F97213D2, Trojan.Artemis!CA98164DB31D, Artemis!3F4DC99EA78D, Artemis!C055EED42B54, Artemis!6DAC92A2003F
24.00%

Fortinet FortiGate
Riskware/EoRezo
24.00%

Malwarebytes
PUP.Optional.FreeSoftToday.A, PUP.Optional.FreeSiftwareToday.A, PUP.Optional.Tuto4PC.A
22.00%

Trend Micro House Call
Suspicious_GEN.F47V0621, Suspicious_GEN.F47V0802, Suspicious_GEN.F47V0731, Suspicious_GEN.F47V0821, TROJ_GEN.R0C1B01IC14
22.00%

Bitdefender
Application.Generic.674096, Adware.Eorezo.CD, Application.Agent.FL, Adware.Eorezo.BK, Adware.Eorezo.BZ
16.00%

The domain dl.hcuoteno.com has been seen to resolve to the following 8 IP addresses.

dl0.eorezo.com
April 14, 2016

dl5.eorezo.com
February 27, 2016

dl7.eorezo.com
February 20, 2016

dl1.eorezo.com
February 9, 2016

dl6.eorezo.com
February 8, 2016

dl2.eorezo.com
February 7, 2016

dl4.eorezo.com
February 1, 2016

dl2.eorezo.com
September 15, 2014

File downloads found at URLs served by dl.hcuoteno.com.

5 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

14 / 68    (Adware)

7 / 68      (Adware)

6 / 68      (Adware)

1 / 68      (Adware)

9 / 68      (Adware)

6 / 68      (Adware)

26 / 68    (Adware)

11 / 68    (Adware)

6 / 68      (Adware)

14 / 68    (Adware)

9 / 68      (Adware)

The following 23 files have been seen to comunicate with dl.hcuoteno.com in live environments.

 
Latest 20 of 26 files

URL:
http://dl.hcuoteno.com/

Title:
“eoRezo”

Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1

30 of 31 related domains