The domain dl.samplayeedmed.com registered by franck rosset was initially registered in October of 2015 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Server location:
Nord-Pas-De-Calais, France (FR)
Create date:
Thursday, October 22, 2015
Expires date:
Saturday, October 22, 2016
Updated date:
Thursday, October 22, 2015
ASN:
AS16276 OVH OVH SAS,FR
Google Safe Browsing:
unwanted
Scanner detections:
Detections (86% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Eorezo.Installer.Meta (M), PUP.Eorezo.Bundler (M), PUP.EasyVpn.Installer (M), PUP.InstallCore.RE48 (M), Adware.Downloader.GuideSty.Meta (M), PUP.EasyVpn (M), PUP.DefenseM (M), Adware.Eorezo.Installer.Meta (M)
88.89%
ESET NOD32
Win32/Adware.EoRezo.BD application, Win32/TrojanDownloader.Adload.NRL trojan
42.22%
Dr.Web
- infected container
c:\users\test\appdata\local\temp\50d259a2d5da6372cb33e99a3f6ce5019e447191 Win3, Trojan.DownLoader17.64052, Trojan.DownLoader22.1654
11.11%
Qihoo 360 Security
HEUR/QVM06.1.0000.Malware.Gen, HEUR/QVM42.1.Malware.Gen
11.11%
ESET NOD32
Win32/Adware.EoRezo.BD (variant), Win32/TrojanDownloader.Adload.NRL
6.67%
IKARUS anti.virus
PUA.EoRezo, Trojan-Downloader.Win32.Adload
6.67%
Kaspersky
Trojan-Downloader.Win32.Genome, UDS:DangerousObject.Multi.Generic, not-a-virus:AdWare.Win32.Eorezo
6.67%
Fortinet FortiGate
W32/Genome.WPTG!tr
6.67%
NANO AntiVirus
Trojan.InnoSetup.Eorezo.dyqoal
4.44%
SUPERAntiSpyware
Adware.EoRezo/Variant
4.44%
Avira AntiVirus
ADWARE/EoRezo.Gen
4.44%
McAfee
Artemis!38AD2615175D, Artemis!9CE192385907
4.44%
AegisLab AV Signature
Uds.Dangerousobject.Multi!c
2.22%
VIPRE Antivirus
Threat.4150696
2.22%
The domain dl.samplayeedmed.com has been seen to resolve to the following 7 IP addresses.
dl2.eorezo.com
April 16, 2016
dl7.eorezo.com
February 27, 2016
dl6.eorezo.com
February 21, 2016
dl1.eorezo.com
February 10, 2016
dl5.eorezo.com
February 9, 2016
dl0.eorezo.com
February 9, 2016
dl4.eorezo.com
February 3, 2016
File downloads found at URLs served by dl.samplayeedmed.com.
The following 23 files have been seen to comunicate with dl.samplayeedmed.com in live environments.
URL:
http://dl.samplayeedmed.com/
Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1
Related Domains