home

support.led.free.fr

Free SAS  (Proxy Registrant)

Domain Information

The domain support.led.free.fr is registered by proxy through ONLINE SAS. The hosted servers are located in Bezons, Ile-De-France within France which resides on the RIPE Network Coordination Centre network.
Registrar:
ONLINE SAS

Server location:
Ile-De-France, France (FR)

ASN:
AS12322 PROXAD Free SAS

Root domain:
free.fr

Whois:
3 free.fr records

The domain support.led.free.fr has been seen to resolve to the following IP address.

212.27.63.104
perso104-g5.free.fr
December 28, 2013

File downloads found at URLs served by support.led.free.fr.

0 / 68
http://support.led.free.fr/.../setup_LedConsommation_4_3_7.exe  (1482a37b2d548bb77be740deda1c8dfc)

0 / 68
http://support.led.free.fr/.../setup_LedRenommer_1_12_2.exe  (9588c6e47201d4a36c57c7f46b2cf7b6)

0 / 68
http://support.led.free.fr/.../setup_LedWallpaper_1_9_3.exe  (cfefe7ec77dea878aed0172a3a1d0e79)

0 / 68
http://support.led.free.fr/.../setup_flechettes_1_0_3.exe  (b92fc2d634da76aef2a9923104b92053)

1 / 68
http://support.led.free.fr/.../setup_LedWallpaper_1_9_2.exe  (69bae0d7a39710efa7dca36cfd04da85)

2 / 68
http://support.led.free.fr/.../setup_LedConsommation_4_3_8.exe  (6a57d57993b90f439635b6fe879b72e0)

The following 2 files have been seen to comunicate with support.led.free.fr in live environments.

TCP » 212.27.63.104:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 212.27.63.104:80
online-guardian-v2.0.9.exe

URL:
http://support.led.free.fr/

Title:
“LED”

Web server:
Apache/ProXad [Jul 22 2015 14:50:04]

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.