Domain > ero-advertising.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to ero-advertising.com

MD5	A/V
c9f6e23075cd806a7e108edf643c396c	[Trojan.Havex.r4] [Trojan.Win32.Havex.ao] [Trojan.Win32.Z.Havex.747520[h]] [Win32.Trojan.Havex.Tcly] [Trojan.DownLoader21.31462] [Trojan.Havex.Win32.19] [BehavesLike.Win32.Dropper.bh] [Trojan.Win32.Havex] [W32/Havex.AO!tr]
0234a958a1db7793c1d363d7e877ab1a	[JS:Trojan.JS.Likejack.A] [JS/Faceliker.H] [JS/Faceliker.a] [Fbjack.C] [Mal/FBJack-R] [TrojWare.JS.TrojanClicker.FbLiker.A] [TrojanClicker:JS/Faceliker.H] [Trojan-Clicker.JS.Faceliker] [JS/FBJack.I!tr] [JS/Clicker]
10375c3524c5271d487b141aa00a1a18
a69fd4e1b26133f18efedebcd7f37dd7	[Mal/FBJack-P] [Trojan.JS.Clickjack] [JS/FBJack.A!tr]
71c1936637f0f516b44df32c7c38c108	[Pornpop.A]
3b2d5665e6c12445a1b6776dd5f6080d	[JS:Trojan.JS.Likejack.A] [JS/Faceliker.H] [JS/Faceliker.a] [Fbjack.C] [Mal/FBJack-R] [TrojWare.JS.TrojanClicker.FbLiker.A] [TrojanClicker:JS/Faceliker.H] [Trojan-Clicker.JS.Faceliker] [JS/FBJack.I!tr] [JS/Clicker] [Trojan.JS.Iframe.zp]
0833f8e10b72288cf287be5aced2cc79
71356c89b73f4fad174f342a6e58be26	[Artemis!71356C89B73F]
2b7809c589a059c4bb04b8f582f267e7
409672556d85696b472d7df0faf4a1f1	[Mal/FBJack-P] [Trojan.JS.Clicker] [JS/FBJack.A!tr]
027bbd1757656e839e9f8e9ff9473e7d	[Clicker.NQ] [HEUR:Trojan.Script.Iframer] [Trojan.Script.Heuristic-js.iacgm]
121774c883d8888a71d11e0d669bdcf8	[Includer.SRC]
2d4e528f5ffb666ebe40f45a538d7e9e	[Clicker.NQ] [HEUR:Trojan.Script.Iframer] [Trojan.Script.Heuristic-js.iacgm] [Downloader.Inor.JS.1]
4bebfceedc74527cf202a91082602f1d	[W32.HfsIframe.4238] [HEUR:Trojan.Script.Iframer]
0eb09a86124d05c232be98ef97684e88	[Trojan.JS.Clicker] [JS/FBJack.A!tr]
0f8b50e7f7d78fc5d79cc94bdeb3c4bb	[Clicker.NQ] [HEUR:Trojan.Script.Iframer]
485e6d6ba03f88fd933a0eafe3d332d1	[Pornpop.B]
406cac957219c6bec104525e6345a1ad	[Downloader.Inor.JS.1] [Clicker.NQ] [HEUR:Trojan.Script.Iframer] [Trojan.Script.Heuristic-js.iacgm]
6105A7A7CA2E1BD800ACE21AC5501E57
9ca1a202df2148dd1a999e9ec9621ad9	[Mal/FBScam-A]

Whois

Property	Value
Email	arthur@siteview.nl
NameServer	NS-1641.AWSDNS-13.CO.UK
Created	2005-12-20 00:00:00
Changed	2014-12-09 00:00:00
Expires	2019-12-20 00:00:00
Registrar	EURODNS S.A

DNS Resolutions

Date	IP Address
2010-03-01	85.17.80.123 (ClassC)
2010-06-04	85.17.80.119 (ClassC)
2010-06-13	85.17.80.120 (ClassC)
2010-06-13	85.17.80.122 (ClassC)
2012-03-31	85.17.80.78 (ClassC)
2013-03-27	85.17.80.124 (ClassC)
2013-04-03	95.211.221.140 (ClassC)
2013-04-19	95.211.221.146 (ClassC)
2013-06-12	85.17.80.114 (ClassC)
2013-07-12	95.211.221.147 (ClassC)
2013-07-23	95.211.221.151 (ClassC)
2013-07-26	95.211.221.152 (ClassC)
2013-08-02	95.211.221.150 (ClassC)
2013-12-10	95.211.221.248 (ClassC)
2013-12-10	95.211.221.144 (ClassC)
2013-12-12	95.211.221.247 (ClassC)
2013-12-14	95.211.221.246 (ClassC)
2014-04-06	95.211.221.145 (ClassC)
2014-09-03	99.192.235.141 (ClassC)
2014-09-03	99.192.235.140 (ClassC)
2014-12-30	185.70.212.101 (ClassC)
2015-01-09	185.70.212.100 (ClassC)
2024-05-06	217.22.19.212 (ClassC)
2025-01-14	217.22.19.250 (ClassC)

Port 80

Subdomains

Date	Domain	IP
nl1.ero-advertising.com	2015-01-10	185.70.212.100
nl2.ero-advertising.com	2024-11-13	208.74.150.138
data.ero-advertising.com	2014-06-26	95.211.221.145
steenbergen.web.ero-advertising.com	2014-12-19	185.70.212.100
exoticads.com.ero-advertising.com	2024-09-11	208.74.150.138
fuckingglasses.com.ero-advertising.com	2024-12-21	208.74.150.138
invideo.ero-advertising.com	2014-06-03	95.211.221.246
tracker.ero-advertising.com	2024-11-25	208.74.150.138
ads.ero-advertising.com	2014-06-26	95.211.221.246
adspaces.ero-advertising.com	2014-07-09	95.211.221.247
banners.ero-advertising.com	2014-06-29	95.211.221.247
net.ero-advertising.com	2024-12-22	208.74.150.138
offplanetmedia.net.ero-advertising.com	2024-09-11	208.74.150.138
www.ero-advertising.com	2024-04-21	217.22.19.212

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]