dl.kochialaetum.com

franck rosset

Domain Information

The domain dl.kochialaetum.com registered by franck rosset was initially registered in June of 2015 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Friday, June 5, 2015

Expires date:
Sunday, June 5, 2016

Updated date:
Friday, June 5, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Adware.EoRezo.BD (variant), Win32/Adware.EoRezo.AJ (variant)
80.00%

Baidu Antivirus
Adware.Win32.EoRezo
80.00%

Sophos
Generic PUA MN (PUA), Generic PUA HB (PUA), Generic PUA BF (PUA)
60.00%

Fortinet FortiGate
Adware/Eorezo
60.00%

Vba32 AntiVirus
AdWare.Eorezo
60.00%

G Data
Gen:Variant.Mikey.26182
60.00%

AVG
Generic6
60.00%

Reason Heuristics
PUP.Eorezo.Bundler (M), PUP.Eorezo.Tuto4pcComInternationalsl.Installer (M)
40.00%

MicroWorld eScan
Gen:Variant.Mikey.26182
40.00%

nProtect
Adware.Eorezo.BZ
40.00%

Quick Heal
PUA.AdwareEorezo.DC8
40.00%

Bitdefender
Gen:Variant.Mikey.26182
40.00%

K7 AntiVirus
Riskware
40.00%

avast!
Win32:Adware-ASG [PUP]
40.00%

NANO AntiVirus
Riskware.Win32.Eorezo.dwryth, Riskware.Win32.Eorezo.dxxfdo
40.00%

The domain dl.kochialaetum.com has been seen to resolve to the following 3 IP addresses.

dl7.eorezo.com
August 23, 2016

dl4.eorezo.com
February 8, 2016

dl5.eorezo.com
January 4, 2016

File downloads found at URLs served by dl.kochialaetum.com.

4 / 68      (PUP)

2 / 68      (inconclusive)

1 / 68      (Adware)

23 / 68    (PUP)

33 / 68    (PUP)

The following 11 files have been seen to comunicate with dl.kochialaetum.com in live environments.

URL:
http://dl.kochialaetum.com/

Title:
“eoRezo”

Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1