www.wrodland.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.wrodland.com is registered by proxy through ENOM, INC. and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Miami Beach, Florida within the United States which resides on the Krypt Technologies network.
Registrar:
ENOM, INC.

Server location:
Florida, United States (US)

Create date:
Tuesday, May 6, 2014

Expires date:
Wednesday, May 6, 2015

Updated date:
Tuesday, May 6, 2014

ASN:
AS35908 VPLSNET - Krypt Technologies,US

Root domain:

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PaymentsInteractiveSL.E, PUP.ClovermediaSL.E, PUP.Tuguu.Clovermedia.Bundler (M), PUP.Tuguu.Cloverme.Bundler (M), PUP.Tuguu.Payments.Bundler (M), PUP.Tuguu (M)
91.67%

McAfee
PUP-FJP!07139B3E6500, PUP-FJV!93806E981504, PUP-FKD!1399471E5D6E
25.00%

Malwarebytes
PUP.Optional.Domalq
25.00%

VIPRE Antivirus
DomaIQ, Trojan.Win32.Generic, Threat.4150696
25.00%

Kaspersky
not-a-virus:AdWare.MSIL.DomaIQ
25.00%

Avira AntiVirus
APPL/DomaIQ.Gen, Adware/Strictor.55983
25.00%

Sophos
DomainIQ pay-per install, Generic PUA JB
25.00%

G Data
Win32.Trojan-Downloader.Lisp, Gen:Variant.Application.Bundler.DomaIQ
25.00%

AVG
DomaIQ, Adware DomaIQ
25.00%

Panda Antivirus
PUP/MultiToolbar.A, Trj/Genetic.gen
25.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A, Threat.Undefined
16.67%

K7 AntiVirus
Unwanted-Program
16.67%

ESET NOD32
Win32/DomaIQ.BB (variant)
16.67%

MicroWorld eScan
Gen:Variant.Application.Bundler.DomaIQ.7
16.67%

Bitdefender
Gen:Variant.Application.Bundler.DomaIQ.7
16.67%

The domain www.wrodland.com has been seen to resolve to the following IP address.

www.krypt.com
May 10, 2014

File downloads found at URLs served by www.wrodland.com.

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (d5eba84bd2c049052c1cba0160d7702f)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (0b99cf2de1760713a3a592c94732c28c)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (43c63c1705747ea8e43bfc035b0602c0)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (66a3928e0d6303982b3c0d38c4dd1d95)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (688eb000ddb7171a4593dac301551e29)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (eb9e2f00b0ee761932a41eaa85ff4ba9)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (21cf56f082c8e84ea615bc19b49c7bb9)

1 / 68      (Adware)
http://www.wrodland.com/.../Java.exe  (97e6aea7fd934eac141e14dd3c65ce42)

0 / 68
http://www.wrodland.com/.../Java.exe  (c90e1b4d62a34a0a969f599422bc192b)

34 / 68    (Adware)
http://www.wrodland.com/.../Java.exe  (7f62f69c752fb629050153cae491c055)

2 / 68      (false positives)

21 / 68    (Adware)
http://www.wrodland.com/.../Java.exe  (93806e9815046f063e99d15d85c211bc)

12 / 68    (Adware)
http://www.wrodland.com/.../Java.exe  (95839d69e449a0039de3dcd9eec62d00)

URL:
http://www.wrodland.com/

Web server:
IIS (WAF/2.0)