boi2rg74gtleh97.lastbuy.ru

Private Person  (Proxy Registrant)

Domain Information

The domain boi2rg74gtleh97.lastbuy.ru is registered by proxy through REGRU-RU and was originally registered in May of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Thursday, May 28, 2015

Expires date:
Saturday, May 28, 2016

ASN:
AS5580 ATRATO Atrato IP Networks

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize
100.00%

Dr.Web
Trojan.InstallMonster.1235
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

ESET NOD32
Win32/InstallMonstr.LO potentially unwanted application
100.00%

Malwarebytes
PUP.Optional.InstallMonster
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Avira AntiVirus
ADWARE/InstallMonster.Gen
100.00%

AhnLab V3 Security
PUP/Win32.InstallMonstr
100.00%

AVG
Generic
100.00%

The domain boi2rg74gtleh97.lastbuy.ru has been seen to resolve to the following IP address.

June 19, 2015

File downloads found at URLs served by boi2rg74gtleh97.lastbuy.ru.

URL:
http://boi2rg74gtleh97.lastbuy.ru/

Title:
“Domain is parked”

Web server:
nginx/1.4.2 (PHP/5.4.17)