home

security-x.fr

Ano Nymous

Domain Information

The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Whois:
2 security-x.fr records

The domain security-x.fr has been seen to resolve to the following 2 IP addresses.

5.135.176.69
ns3283194.ip-5-135-176.eu
September 27, 2014

213.186.33.2
cluster002.ovh.net
May 1, 2014

File downloads found at URLs served by security-x.fr.

2 / 68
http://security-x.fr/.../download.php?f=LopSD.exe  (2135cd31425e6301db97016737a4cbf5)

4 / 68      (inconclusive)
http://security-x.fr/.../download.php?f=ToolBarSD.exe  (f0f81fc46126ddbe7a75416083ae7ef4)

1 / 68
http://security-x.fr/.../download.php?f=SXCU.exe  (0f3799a232b94a5c18c52e9f702f96dc)

1 / 68      (inconclusive)
http://security-x.fr/.../download.php?f=MbrScan.exe  (35ff19a3ecc56c5e9ed29d49c0ffedca)

The following 23 files have been seen to comunicate with security-x.fr in live environments.

TCP » 213.186.33.2:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.2:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.2:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.2:80
UCBrowser.exe (by UCWeb)

TCP » 213.186.33.2:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.2:80
apptrailers.exe

TCP » 213.186.33.2:80
browser.exe (speed browser by Smart Applications)

TCP » 213.186.33.2:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.2:80
Havij.exe (Havij by ITSecTeam)

TCP » 213.186.33.2:80
onlineguardian-v2.exe

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:587
wrk.exe

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
avwebgrd.exe (Avira Product Family by Avira Operations GmbH & Co. KG)

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
ymsgr_tray.exe (Yahoo! Messenger by Yahoo!)

TCP » 213.186.33.2:80
Connectify.exe (Connectify)

TCP » 213.186.33.2:80
PandoraService.exe (by Pandora.TV)

 
Latest 20 of 25 files

May 20, 2016
tools.security-x.fr

URL:
http://security-x.fr/

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.