home

static.tennoio.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain static.tennoio.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2015. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Wednesday, July 8, 2015

Expires date:
Friday, July 8, 2016

Updated date:
Wednesday, July 8, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
tennoio.com

Whois:
1 tennoio.com record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Dr.Web
Trojan.DownLoader21.27343
66.67%

VIPRE Antivirus
Threat.4150696
33.33%

ESET NOD32
multiple threats
33.33%

Kaspersky
not-a-virus:RiskTool.Win32.ADInstaller
33.33%

McAfee
Trojan.Artemis!E817D8C19287
33.33%

avast!
Win32:Malware-gen
33.33%

The domain static.tennoio.com has been seen to resolve to the following 2 IP addresses.

37.187.163.56
csdi-dl0.clean-navigate.com
May 25, 2016

37.187.174.50
csdi-dl1.clean-navigate.com
May 25, 2016

File downloads found at URLs served by static.tennoio.com.

4 / 68      (Malware)
http://static.tennoio.com/dl/demo/.../fastsearch_515d7c77515a06dba.exe  (setupfa_2112.exe)

2 / 68      (inconclusive)
http://static.tennoio.com/dl/.../AnySend_Javi.exe  (facb0f9fd6166df6b58e8aa52ae5a569)

1 / 68      (inconclusive)
http://static.tennoio.com/dl/.../AnySend_Javi.exe  (4ihfq0ueb.exe)

0 / 68
http://static.tennoio.com/dl/demo/.../freethemediaplayer1446.exe  (l6gnkxi7h.exe)

The following 8 files have been seen to comunicate with static.tennoio.com in live environments.

TCP » 37.187.163.56:80
nsr5a24.tmp

TCP » 37.187.163.56:80
nsr90fc.tmp

TCP » 37.187.163.56:80
pirritupdater.tmp

TCP » 37.187.174.50:80
nsm1f07.tmp

TCP » 37.187.174.50:80
nspc824.tmp

TCP » 37.187.174.50:80
nsta8d8.tmp

TCP » 37.187.174.50:80
client.exe (ClientWrapper)

TCP » 37.187.174.50:80
uninstall.exe

TCP » 37.187.174.50:80
pirritupdater.tmp

URL:
http://static.tennoio.com/

Web server:
Apache/2.2.22

clean-navigate.com

meldonan.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.