home

rdtutos.fr

Ano Nymous

Domain Information

The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH Systems

Whois:
2 rdtutos.fr records

The domain rdtutos.fr has been seen to resolve to the following IP address.

213.186.33.3
cluster015.ovh.net
August 1, 2014

File downloads found at URLs served by rdtutos.fr.

7 / 68      (Malware)
http://rdtutos.fr/download.php?file=ToolsDownloader  (toolsdownloader.exe)

0 / 68
http://rdtutos.fr/download.php?file=LoadTool  (loadtool.exe)

0 / 68
http://rdtutos.fr/download.php?file=LoadTool  (loadtool.exe)

0 / 68
http://rdtutos.fr/.../LoadTool.exe  (loadtool_5.1.exe)

0 / 68
http://rdtutos.fr/download.php?file=LoadTool  (loadtool_5.1.exe)

6 / 68      (inconclusive)
http://rdtutos.fr/download.php?file=LoadTool  (loadtool.exe)

0 / 68
http://rdtutos.fr/download.php?file=LoadTool  (loadtool.exe)

2 / 68
http://rdtutos.fr/download.php?file=LoadTool  (loadtool.exe)

The following 36 files have been seen to comunicate with rdtutos.fr in live environments.

TCP » 213.186.33.3:80
cykimhegigka.exe

TCP » 213.186.33.3:80
1799877.exe

TCP » 213.186.33.3:80
bosadgypujuz.exe

TCP » 213.186.33.3:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.3:80
browser.exe (Speed Browser by Smart Applications)

TCP » 213.186.33.3:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.3:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.3:80
jingling.exe

TCP » 213.186.33.3:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 213.186.33.3:443
apptrailers.exe

TCP » 213.186.33.3:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.3:80
onlineguardian-v2.exe

TCP » 213.186.33.3:25
wrk.exe

TCP » 213.186.33.3:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.186.33.3:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.3:80
abb1213.tmp

TCP » 213.186.33.3:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.3:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.3:80
online-guardian-v2.exe

TCP » 213.186.33.3:80
online-guardian-v2.exe

 
Latest 20 of 40 files

December 14, 2014
www.rdtutos.fr

URL:
http://rdtutos.fr/

Google Analytics:
UA-47053222

Title:
“Accueil • RD Tutos”

Description:
“Accueil du site RD Tutos. Description du site.”

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.