ejfadrirru.nedelya-angarsk.ru

Private Person  (Proxy Registrant)

Domain Information

The domain ejfadrirru.nedelya-angarsk.ru is registered by proxy through REGRU-RU and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Moscow City, Russia (RU)

Create date:
Sunday, February 22, 2015

Expires date:
Monday, February 22, 2016

ASN:
AS197695 AS-REGRU _Domain names registrar REG.RU_, Ltd,RU

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.AuditFirmACTIVEAUDIT, PUP.InstallMonster.AuditFirmACTIVEAUDIT (M), PUP.InstallMonster.AuditFir (M), PUP.InstallMonster (M)
100.00%

VIPRE Antivirus
Threat.5064197
16.67%

Dr.Web
Trojan.InstallMonster.1222
16.67%

F-Prot
W32/Trojan5.LXL
16.67%

Avira AntiVirus
TR/Dropper.Gen
16.67%

Bkav FE
W32.HfsAdware
16.67%

Malwarebytes
PUP.Optional.InstallMonster
16.67%

Zillya! Antivirus
Adware.InstallMonster.Win32.156
16.67%

K7 AntiVirus
Trojan
16.67%

Agnitum Outpost
Riskware.Agent
16.67%

Comodo Security
Application.Win32.InstallMonster.KS
16.67%

Sophos
Install Monster
16.67%

Vba32 AntiVirus
AdWare.InstallMonster
16.67%

ESET NOD32
Win32/InstallMonstr.JT potentially unwanted (variant)
16.67%

IKARUS anti.virus
Gen.AdWare.SMSHoax
16.67%

The domain ejfadrirru.nedelya-angarsk.ru has been seen to resolve to the following 2 IP addresses.

March 1, 2016

May 6, 2015

File downloads found at URLs served by ejfadrirru.nedelya-angarsk.ru.

URL:
http://ejfadrirru.nedelya-angarsk.ru/

Google Analytics:
UA-55552418

Title:
“Истёк срок регистрации доменаnedelya-angarsk.ru”

Web server:
nginx

30 of 151 related domains