home

59f000939f8919accc28b48b.fileskaholic.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 59f000939f8919accc28b48b.fileskaholic.ru is registered by proxy through REGRU-RU and was originally registered in June of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Thursday, June 2, 2016

Expires date:
Friday, June 2, 2017

Root domain:
fileskaholic.ru

Whois:
1 fileskaholic.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCube.ROSKONNE (M), PUP.InstallCube (M)
100.00%

File downloads found at URLs served by 59f000939f8919accc28b48b.fileskaholic.ru.

1 / 68      (PUP)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250285759&token=e8f5287100fd86ef05976b7dbde5f9fe&return_url=http://folder.la/.../IDM_6.21_Build_14_Setup_with_Crack.rar.html&source=&format=json  (idm_6.exe)

1 / 68      (PUP)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250298878&token=2d14f5c42a45bb4afa2769a71f93ac86&return_url=http://.../file?f=402440b2dc4debfd99292d91d3ecf4559a7fd57bb1a2cdae774937269aa89d9147d985ada97504ea7e7133b4b0ca1b02543db73ddf6bdab4771148435e4c9a43b722010c9d650c84b7d61c807d0fc77960e8403092546bed489e5a3a92dab50a5b7a86b0193870f89fef7084a14584d474009bf6a10312890fd9e0bda37569d05c3a1e40a1cf00aa55d45403a99b886d85de4eea806f00916e4bebb7a90bf98089c7374a1664e9ca9bc7a343b9620ee327100118e12e&source=&format=json  (gta_san_andreas_superman_free_pc_game.exe)

1 / 68      (Malware)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250288922&token=bccfed2e884118eab4f3e415f662b1cb&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (facebook_password_stealer.exe)

1 / 68      (PUP)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250282697&token=5d3af8dc1d5106b956bfde28b2c241c3&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (corel_draw_x7_serial_number_and_keygen_full_free_d.exe)

1 / 68      (PUP)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250288922&token=bccfed2e884118eab4f3e415f662b1cb&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (facebook_password_stealer.exe)

1 / 68      (PUP)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250291318&token=04ceb846a1fd7e6d4b71043275664de7&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (the_mummy_1_game.exe)

1 / 68      (PUP)
http://59f000939f8919accc28b48b.fileskaholic.ru/api/web/getInstaller?transaction_id=250286678&token=69fc017b66b26249b4f8ee969fb6e9c7&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (k7_total_security_2016_crack_activation_key_free.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.