home

dlpierrot709.free.fr

FREE SAS  (Proxy Registrant)

Domain Information

The domain dlpierrot709.free.fr is registered by proxy through ONLINE SAS. Currently this domain has been known to host various forms of malware.
Registrar:
ONLINE SAS

ASN:
AS12322 PROXAD Free SAS, FR

Root domain:
free.fr

Whois:
1 free.fr record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.Win32.VkHost
100.00%

nProtect
Trojan/W32.Agent.659456.BF
100.00%

McAfee
Artemis!B5F14D44569B
100.00%

Norman
Suspicious_Gen2.VHXLY
100.00%

Trend Micro House Call
TROJ_GEN.R47B1LE
100.00%

Agnitum Outpost
Trojan.VkHost
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

IKARUS anti.virus
Trojan.Win32.VkHost
100.00%

AVG
Generic19
100.00%

Panda Antivirus
Generic Trojan
100.00%

Bkav FE
W32.Clod80c.Trojan
100.00%

Reason Heuristics
Unnamed.Threat.17
100.00%

The domain dlpierrot709.free.fr has been seen to resolve to the following IP address.

212.27.63.168
perso168-g5.free.fr
November 19, 2013

File downloads found at URLs served by dlpierrot709.free.fr.

12 / 68    (Malware)
http://dlpierrot709.free.fr/.../Longcheer.exe  (b5f14d44569bdc702a26b024bc5b0bcd)

The following 3 files have been seen to comunicate with dlpierrot709.free.fr in live environments.

TCP » 212.27.63.168:80
onlineguardian-v2.exe

TCP » 212.27.63.168:80
online-guardian-v2.0.9.exe

TCP » 212.27.63.168:80
online-guardian-v2.0.9.exe

URL:
http://dlpierrot709.free.fr/

Title:
“Index of /”

Web server:
Apache/ProXad [Apr 20 2012 15:06:05]

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.