dl.nectophrynoides.com

franck rosset

Domain Information

The domain dl.nectophrynoides.com registered by franck rosset was initially registered in September of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Wednesday, September 10, 2014

Expires date:
Thursday, September 10, 2015

Updated date:
Wednesday, September 10, 2014

ASN:
AS16276 OVH OVH SAS,FR

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.FreeSoftToday.A
100.00%

K7 AntiVirus
Adware
100.00%

avast!
Win32:Adware-ASG [PUP]
100.00%

Sophos
EoRezo Adware
100.00%

Dr.Web
Adware.Downware.3239
100.00%

Baidu Antivirus
Adware.Win32.EoRezo
100.00%

ESET NOD32
Win32/AdWare.EoRezo.AW
100.00%

AVG
Generic
100.00%

Reason Heuristics
PUP.Installer.Tuto4PC.P
100.00%

McAfee
Artemis!2AFA6946B23A
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0811
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

Fortinet FortiGate
Riskware/EoRezo
100.00%

The domain dl.nectophrynoides.com has been seen to resolve to the following IP address.

dl7.eorezo.com
September 21, 2014

File downloads found at URLs served by dl.nectophrynoides.com.

13 / 68    (Adware)

The following 4 files have been seen to comunicate with dl.nectophrynoides.com in live environments.

URL:
http://dl.nectophrynoides.com/

Title:
“eoRezo”

Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze14 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1