desktopcloud.cdnmail.ru

MGL Mail.ru Internet Assets Limited

Domain Information

The domain desktopcloud.cdnmail.ru registered by MGL Mail.ru Internet Assets Limited was initially registered in November of 2008 through RU-CENTER-REG-RIPN. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Remove Malware from desktopcloud.cdnmail.ru - Powered by Reason Core Security
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Friday, November 21, 2008

Expires date:
Saturday, November 21, 2015

ASN:
AS47764 MAILRU-AS Limited liability company Mail.Ru

Root domain:

Scanner detections:
Detections  (87% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.M
86.67%

AVG
MalSign.Generic, LLC Mail.Ru
33.33%

Bkav FE
W32.HfsAdware
6.67%

The domain desktopcloud.cdnmail.ru has been seen to resolve to the following 3 IP addresses.

moscow.cdnmail.ru
March 1, 2014

moscow.cdnmail.ru
January 22, 2014

matrix3.mail.ru
December 25, 2013

File downloads found at URLs served by desktopcloud.cdnmail.ru.

1 / 68
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (3fce711f3e8e8e5286fb6b7293d7c1f0)

2 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (46dcbde702118454b21f2b6f4410bdab)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (22f15bc9537f748142f5a572a27deb85)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (239096e9a5b58a22ca4514af034d4975)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (ad121e5f06ab5236b2f699fe9b7b5bb9)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (6c2c923786d23dd0134eb44221c99819)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (eb6e426b6091bae72f5363385b15c917)

1 / 68
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (6eaf8e085f9a52ffc4c3d3c3b7669a09)

2 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (891b8faba3a2500446d05cb5039efe8d)

2 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (7fccd36c3394c75bc2898adeb2b4ae1f)

2 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (a57c13cfbcc0e23eff45522b37e7e711)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (bec71a60b87257b9d2cc9d75f04c441b)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (dfe75b518492a6ab3c619b3b487f904f)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (290c507ff165508369a5366dcac7135f)

1 / 68      (PUP)
https://desktopcloud.cdnmail.ru/.../Mail.Ru_Cloud.exe  (0036837779479fe70197192e70df711c)

The following 31 files have been seen to comunicate with desktopcloud.cdnmail.ru in live environments.

 
Latest 20 of 38 files

URL:
http://desktopcloud.cdnmail.ru/

SSL certificate subject:
CN=*.mail.ru, OU=IT, O=LLC Mail.Ru, L=Moscow, S=RUSSIAN FEDERATION, C=RU

SSL certificate issuer:
CN=GeoTrust SSL CA - G2, O=GeoTrust Inc., C=US

Web server:
nginx

Remove Malware from desktopcloud.cdnmail.ru - Powered by Reason Core Security