internetmailru.cdnmail.ru

MGL Mail.ru Internet Assets Limited

Domain Information

The domain internetmailru.cdnmail.ru registered by MGL Mail.ru Internet Assets Limited was initially registered in November of 2008 through RU-CENTER-REG-RIPN. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Friday, November 21, 2008

Expires date:
Monday, November 21, 2016

ASN:
AS47764 MAILRU-AS Limited liability company Mail.Ru

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.MailRu.Q, PUP.Optional.MailRu.I, PUP.Optional.MailRu.R, Win32.Generic.Installer.Meta, PUP.MailRu
100.00%

Rising Antivirus
PE:Trojan.RuMail!1.6574
83.33%

Avira AntiVirus
APPL/LoadMoney.C
33.33%

NANO AntiVirus
Trojan.Win32.Delf.cqwszn
16.67%

Emsisoft Anti-Malware
Trojan.Generic.6494134
16.67%

The domain internetmailru.cdnmail.ru has been seen to resolve to the following 3 IP addresses.

moscow.cdnmail.ru
February 28, 2016

moscow.cdnmail.ru
February 6, 2014

matrix2.mail.ru
December 29, 2013

File downloads found at URLs served by internetmailru.cdnmail.ru.

2 / 68      (PUP)
http://internetmailru.cdnmail.ru/InternetInstaller.exe  (1c0b856e9be2b1341f9b47ed81b89c11)

2 / 68      (PUP)

3 / 68      (PUP)

0 / 68
http://internetmailru.cdnmail.ru/InternetInstaller.exe  (05462ce3ff4dcc6d6ebc007a3f02240a)

2 / 68      (PUP)

2 / 68      (PUP)

4 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)
http://internetmailru.cdnmail.ru/Internet.exe  (82c75232e05dd49322d949b5870290d4)

3 / 68      (PUP)
http://internetmailru.cdnmail.ru/Internet.exe  (9b0211d6a89b7d3d07e421bd5504ace9)

2 / 68      (PUP)

3 / 68      (PUP)

0 / 68
http://internetmailru.cdnmail.ru/Internet_rfrmain.exe  (e5b1208eff902c6abb0b730408c70f21)

URL:
http://internetmailru.cdnmail.ru/

SSL certificate subject:
CN=*.mail.ru, OU=IT, O=LLC Mail.Ru, L=Moscow, S=RUSSIAN FEDERATION, C=RU

SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US

Web server:
nginx