home

download.adlice.com

ASCOET Julien

Domain Information

The domain download.adlice.com registered by ASCOET Julien was initially registered in June of 2013 through OVH. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Saturday, June 15, 2013

Expires date:
Thursday, June 15, 2017

Updated date:
Tuesday, May 19, 2015

ASN:
AS16276 OVH OVH Systems

Root domain:
adlice.com

Whois:
2 adlice.com records

The domain download.adlice.com has been seen to resolve to the following IP address.

91.121.101.47
ns29228.ip-91-121-101.eu
March 11, 2015

File downloads found at URLs served by download.adlice.com.

0 / 68
http://download.adlice.com/.../RogueKillerCMD.exe  (384b288575606f9a306c96a50edb1ba4)

0 / 68
http://download.adlice.com/.../setup.exe  (d279c05e2c87e4de889480a2b48721ae)

0 / 68
http://download.adlice.com/.../RogueKiller.exe  (976bbe351de526941c3a730897840f86)

0 / 68
http://download.adlice.com/.../?action=download&app=roguekiller&type=x64  (roguekillerx64.exe)

0 / 68
http://download.adlice.com/.../RogueKillerX64.exe  (9d0cee1e1fb09b9a3706ea0c9a57a334)

0 / 68
http://download.adlice.com/.../RogueKiller_beta.exe  (9f4a033c71f8ef0eca27bf458334a301)

The following 5 files have been seen to comunicate with download.adlice.com in live environments.

TCP » 91.121.101.47:80
D7.exe (d7 by Foolish IT)

TCP » 91.121.101.47:80
avwebgrd.exe (Avira Free Antivirus by Avira Operations GmbH & Co. KG)

TCP » 91.121.101.47:80
roguekiller.exe (RogueKiller by Adlice Software)

TCP » 91.121.101.47:80
roguekiller.exe (RogueKiller by Adlice Software)

TCP » 91.121.101.47:80
roguekiller.exe (RogueKiller by Adlice Software)

URL:
http://download.adlice.com/

SSL certificate subject:
CN=*.adlice.com, OU=EssentialSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.