download.mediaplay.ru

Private Person  (Proxy Registrant)

Domain Information

The domain download.mediaplay.ru is registered by proxy through RU-CENTER-RU and was originally registered in January of 2009. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Thursday, January 22, 2009

Expires date:
Sunday, January 22, 2017

ASN:
AS48347 MTW-AS JSC MediaSoft Ekspert

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Downware.1659, Adware.Downware.2208, Program.MediaGet.21
78.57%

Trend Micro House Call
TROJ_GEN.F47V0306, TROJ_GEN.F47V0430, TROJ_GEN.F47V0220, TROJ_GEN.F47V0325, Suspicious_GEN.F47V0815, Suspicious_GEN.F47V1213
57.14%

McAfee
Artemis!B002EC343B01, Artemis!81DC82DB35E2, Artemis!64254B0B3CA4, Artemis!13852D9EFF52, Artemis!58EFC35138E3, Artemis!F1149968D2F6
50.00%

McAfee Web Gateway
Artemis!B002EC343B01, Artemis!81DC82DB35E2, Artemis!64254B0B3CA4, Artemis!13852D9EFF52, Artemis!58EFC35138E3
50.00%

AhnLab V3 Security
PUP/Win32.Amonetize
50.00%

ESET NOD32
Win32/Amonetize (variant), Win32/Amonetize.AJ (variant), Win32/MediaGet.AF (variant), Win32/MediaGet.AF potentially unwanted (variant)
50.00%

AVG
Media
50.00%

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Amonetize (M)
50.00%

avast!
Win32:Amonetize-I [PUP], Win32:Amonetize-Q [PUP], Win32:Amonetize-N [PUP]
35.71%

Sophos
Amonetize, Generic PUA HJ
35.71%

Fortinet FortiGate
Riskware/Amonetize
21.43%

K7 Gateway Antivirus
Unwanted-Program , Trojan
21.43%

K7 AntiVirus
Unwanted-Program , Trojan
21.43%

Agnitum Outpost
Trojan.Kryptik
14.29%

Avira AntiVirus
ADWARE/Adware.Gen2, PUA/MediaGet.Gen
14.29%

The domain download.mediaplay.ru has been seen to resolve to the following IP address.

discounttoday.ru
March 14, 2014

File downloads found at URLs served by download.mediaplay.ru.

8 / 68      (PUP)

5 / 68      (PUP)

9 / 68      (PUP)

1 / 68      (Malware)

6 / 68      (PUP)

5 / 68      (PUP)

6 / 68      (PUP)

5 / 68      (PUP)

9 / 68      (PUP)

11 / 68    (PUP)
http://download.mediaplay.ru/download2.php?r=hdclub.org  (tomorrowland_2013_official_song_first_day_of_tomo_id1170210ids1s.exe)

6 / 68      (PUP)

9 / 68      (PUP)

1 / 68      (Malware)

11 / 68    (PUP)
http://download.mediaplay.ru/download2.php?r=animekun.ru  (tomorrowland_2013_official_song_first_day_of_tomo_id1170210ids1s.exe)

11 / 68    (PUP)
http://download.mediaplay.ru/download.php?reinstall=1  (tomorrowland_2013_official_song_first_day_of_tomo_id1170210ids1s.exe)

8 / 68      (PUP)

5 / 68      (PUP)

8 / 68      (PUP)
http://download.mediaplay.ru/download.php?r=softportal  (record_megamix_by_magnit_slider_-_radio_record_16_id2137854ids1s.exe)

8 / 68      (PUP)
http://download.mediaplay.ru/download2.php?r=unionpeer.org  (record_megamix_by_magnit_slider_-_radio_record_16_id2137854ids1s.exe)

11 / 68    (PUP)
http://download.mediaplay.ru/download.php?comment=o479  (tomorrowland_2013_official_song_first_day_of_tomo_id1170210ids1s.exe)

8 / 68      (PUP)

3 / 68      (PUP)

10 / 68    (PUP)

6 / 68      (PUP)

5 / 68      (PUP)

11 / 68    (PUP)

9 / 68      (PUP)

URL:
http://download.mediaplay.ru/

Web server:
nginx/1.8.1 (PHP/5.4.16)