rs14.rodfile.com
Whois Privacy Protection Service, Inc. (Proxy Registrant)
Domain Information
The domain rs14.rodfile.com is registered by proxy through NAME.COM, INC. and was originally registered in December of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tehran, Tehran within Iran which resides on the RIPE Network Coordination Centre network.
Registrant:
Whois Privacy Protection Service, Inc.
Server location:
Tehran, Iran (IR)
Create date:
Sunday, December 18, 2011
Expires date:
Monday, December 18, 2017
Updated date:
Monday, July 20, 2015
ASN:
AS16322 PARSONLINE Pars Online PJS, IR
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Bkav FE
W32.Clod181.Trojan
100.00%
MicroWorld eScan
Application.Hacktool.RemoveWAT.A
100.00%
McAfee
Artemis!BFACF78644CA
100.00%
Malwarebytes
HackTool.Wpakill
100.00%
F-Prot
W32/Backdoor2.HKVF
100.00%
Trend Micro House Call
HKTL_WPAKILL
100.00%
avast!
Win32:Wpakill [PUP]
100.00%
Clam AntiVirus
Hacktool.Crack.WPA
100.00%
Kaspersky
not-a-virus:RiskTool.Win32.WatKill
100.00%
Bitdefender
Application.Hacktool.RemoveWAT.A
100.00%
Lavasoft Ad-Aware
Application.Hacktool.RemoveWAT.A
100.00%
Comodo Security
ApplicUnwnt.Win32.WPAkill.~A
100.00%
F-Secure
Application.Hacktool.RemoveWAT
100.00%
Dr.Web
Tool.Siggen.6228
100.00%
The domain rs14.rodfile.com has been seen to resolve to the following 2 IP addresses.
185.13.231.4.pol.ir
August 25, 2016
box322.bluednszone.com
May 17, 2016
File downloads found at URLs served by rs14.rodfile.com.
URL:
http://rs14.rodfile.com/
