www.nanosoftrom.me

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain www.nanosoftrom.me is registered by proxy through NameCheap, Inc.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Little Rock, Arkansas within the United States which resides on the Black Lotus Communications network.
Registrar:
NameCheap, Inc.

Server location:
Arkansas, United States (US)

ASN:
AS32421 BLCC - Black Lotus Communications

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!CAD710EA5E39, Trojan.Artemis!45571677457A
66.67%

AVG
Generic, Adware Generic6.AAKX
66.67%

Malwarebytes
PUP.Optional.BRApp.A
33.33%

K7 AntiVirus
Adware
33.33%

NANO AntiVirus
Trojan.Win32.Triosir.dgibtv
33.33%

F-Prot
W32/A-07794f8f
33.33%

Trend Micro House Call
Suspicious_GEN.F47V0415
33.33%

avast!
Win32:Adware-gen [Adw]
33.33%

Kaspersky
Trojan.Win32.Nurjax
33.33%

Agnitum Outpost
Riskware.Agent
33.33%

Comodo Security
ApplicUnwnt
33.33%

Sophos
Generic PUA AL
33.33%

Avira AntiVirus
ADWARE/BrAppWare.1855708
33.33%

G Data
Win32.Riskware.NJax
33.33%

Baidu Antivirus
Trojan.Win32.Nurjax
33.33%

The domain www.nanosoftrom.me has been seen to resolve to the following 2 IP addresses.

April 17, 2016

February 3, 2016

File downloads found at URLs served by www.nanosoftrom.me.

9 / 68      (PUP)
http://www.nanosoftrom.me/.../310714_br.exe  (2b3c184b4e65a7df634e3f57860d10ff)

19 / 68    (PUP)
http://www.nanosoftrom.me/.../291014_nj.exe  (cad710ea5e39ebd696ae35b3c92b70e2)

URL:
http://www.nanosoftrom.me/

Title:
“nanosoftrom.me - Registered at Namecheap.com”

Web server:
nginx/1.0.15 (ASP.NET,ARR/2.5,ASP.NET) (Version: 4.0.30319)