home

www.prontogourmetnatal.com.br

Danilo Araujo Xavier

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Brea, California within the United States which resides on the New Dream Network, LLC network.
Server location:
California, United States (US)

ASN:
AS26347 DREAMHOST-AS - New Dream Network, LLC, US

Root domain:
prontogourmetnatal.com.br

Whois:
1 prontogourmetnatal.com.br record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.GenericKD.2371551, Trojan.GenericKD.2282309
100.00%

nProtect
Trojan.GenericKD.2371551, Trojan.GenericKD.2282309
100.00%

VIPRE Antivirus
Win32.Malware!Drop, Trojan.Win32.Generic
100.00%

K7 AntiVirus
Riskware , Trojan-Downloader
100.00%

NANO AntiVirus
Trojan.Win32.Banload.drohri, Trojan.Win32.Banload.dqhczc
100.00%

ESET NOD32
MSIL/Spy.Banker.CN (variant), Win32/TrojanDownloader.Banload.VND (variant)
100.00%

Trend Micro House Call
TROJ_GEN.R0EBC0EEA15, TROJ_GEN.R03AC0DDF15
100.00%

avast!
Win32:Malware-gen, Win32:Dropper-gen [Drp]
100.00%

Kaspersky
Trojan-Downloader.MSIL.Banload, Trojan-Downloader.Win32.Banload
100.00%

Bitdefender
Trojan.GenericKD.2371551, Trojan.GenericKD.2282309
100.00%

Lavasoft Ad-Aware
Trojan.GenericKD.2371551, Trojan.GenericKD.2282309
100.00%

Sophos
Mal/Generic-S
100.00%

F-Secure
Trojan.GenericKD.2371551, Trojan.GenericKD.2282309
100.00%

Trend Micro
TROJ_GEN.R0EBC0EEA15, TROJ_GEN.R03AC0DDF15
100.00%

Emsisoft Anti-Malware
Trojan.GenericKD.2371551, Trojan.GenericKD.2282309
100.00%

The domain www.prontogourmetnatal.com.br has been seen to resolve to the following IP address.

66.33.193.135
ds8778.dreamservers.com
April 17, 2016

File downloads found at URLs served by www.prontogourmetnatal.com.br.

27 / 68    (Malware)
http://www.prontogourmetnatal.com.br/wp-content/themes/twentythirteen/inc/.../?ComunicadoDebito_ReceitaFederal_KgH2214  (comunicadodebito_receitafederal_ghs44125.exe)

28 / 68    (Malware)
http://www.prontogourmetnatal.com.br/wp-content/themes/twentyfourteen/inc/.../?debito  (receita_debito_2015-5544124.exe)

URL:
http://www.prontogourmetnatal.com.br/

Title:
“Pronto Gourmet » Produtos”

Web server:
Apache

Facebook:
Likes:  6
Shares:  3

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.