The domain dl.proteusanguinus.com registered by franck rosset was initially registered in August of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Server location:
Nord-Pas-De-Calais, France (FR)
Create date:
Wednesday, August 6, 2014
Expires date:
Saturday, August 6, 2016
Updated date:
Monday, June 29, 2015
ASN:
AS16276 OVH OVH SAS,FR
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.TUTO4PCCOMINTERNATIONALSL.M, Threat.Eorezo.Installer, PUP.Eorezo.TUTO4PCCOMINTERNATIONAL.Installer (M), PUP.Tuto4PC.Installer.Meta (M), PUP.Eorezo.TUTO4PCC.Installer (M)
100.00%
Sophos
EoRezo Adware, TUTO4PC
50.00%
VIPRE Antivirus
Tuto4PC, Threat.4895339
50.00%
Baidu Antivirus
Adware.Win32.EoRezo, Adware.Win32.Eorezo
50.00%
Dr.Web
Adware.Eorezo.31, Adware.Downware.8084
47.06%
avast!
Win32:Eorezo-CX [PUP], Win32:Eorezo-CM [PUP], Win32:Eorezo-CN [PUP]
29.41%
ESET NOD32
Win32/AdWare.EoRezo.AU (variant), Win32/Adware.EoRezo.AJ (variant)
29.41%
AVG
Generic, Generic5
29.41%
Kaspersky
not-a-virus:AdWare.Win32.Eorezo
29.41%
NANO AntiVirus
Trojan.Win32.DownLoader11.depbld, Riskware.Win32.Eozo.dewgao, Riskware.Win32.Eorezo.dfeqkh, Riskware.Win32.Eorezo.dfhekk
26.47%
Panda Antivirus
Trj/Chgt.F, Trj/Chgt.G, Trj/Chgt.I
23.53%
Avira AntiVirus
APPL/Agent.FL.23, Adware/EoRezo.A.467, Adware/EoRezo.eid.190, Adware/EoRezo.eid.131, Adware/EoRezo.eid.263, Adware/EoRezo.eid.176
17.65%
ESET NOD32
multiple threats
17.65%
MicroWorld eScan
Application.Agent.FL, Adware.Eorezo.BP, Application.Generic.800371, Application.Generic.804801
14.71%
Bitdefender
Application.Agent.FL, Adware.Eorezo.BP, Application.Generic.800371, Application.Generic.804801
14.71%
The domain dl.proteusanguinus.com has been seen to resolve to the following 7 IP addresses.
dl6.eorezo.com
June 4, 2016
dl1.eorezo.com
April 14, 2016
dl4.eorezo.com
March 31, 2016
dl7.eorezo.com
February 28, 2016
dl5.eorezo.com
February 19, 2016
dl0.eorezo.com
February 3, 2016
dl2.eorezo.com
January 5, 2016
File downloads found at URLs served by dl.proteusanguinus.com.
The following 23 files have been seen to comunicate with dl.proteusanguinus.com in live environments.
URL:
http://dl.proteusanguinus.com/
Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1
Related Domains