dl.yadiothironen.com
franck rosset
Domain Information
The domain dl.yadiothironen.com registered by franck rosset was initially registered in October of 2015 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Server location:
Nord-Pas-De-Calais, France (FR)
Create date:
Thursday, October 22, 2015
Expires date:
Saturday, October 22, 2016
Updated date:
Thursday, October 22, 2015
ASN:
AS16276 OVH OVH SAS,FR
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Eorezo.Installer.Meta (M), PUP.Eorezo.Bundler (M), PUP.Eorezo (M)
74.19%
ESET NOD32
Win32/Adware.EoRezo.BD application, multiple threats
74.19%
Kaspersky
not-a-virus:AdWare.Win32.Eorezo
54.84%
Emsisoft Anti-Malware
Gen:Variant.Adware.Eorezo, Adware.Eorezo.DB
45.16%
Norman
Gen:Variant.Adware.Eorezo.2, Adware.Eorezo.DB
38.71%
Dr.Web
Threat.Undefined, - infected container
c:\users\test\appdata\local\temp\97b2308e63486a63ee17ae2d82ba0d668eafd699\data, Detection.Undefined
35.48%
F-Secure
Suspected infection: Adware.Eorezo.DB
22.58%
Sophos
PUA 'Eorezo' (of type Adware)
12.90%
avast!
Win32:Adware-gen [Adw]
9.68%
VIPRE Antivirus
Threat.4150696, Threat.5059905
9.68%
The domain dl.yadiothironen.com has been seen to resolve to the following 6 IP addresses.
dl6.eorezo.com
April 15, 2016
dl0.eorezo.com
March 3, 2016
dl7.eorezo.com
March 3, 2016
dl1.eorezo.com
February 7, 2016
dl5.eorezo.com
February 3, 2016
dl4.eorezo.com
January 4, 2016
File downloads found at URLs served by dl.yadiothironen.com.
The following 22 files have been seen to comunicate with dl.yadiothironen.com in live environments.
URL:
http://dl.yadiothironen.com/
Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1
Related Domains
