» login.refog.com
Overview
IPs Addresses (2)
Downloads (21)
Network (1)
Website Detail
Related Domains (5)

login.refog.com

WHOISGUARD, INC. (Proxy Registrant)

Domain Information

The domain login.refog.com is registered by proxy through ENOM, INC. and was originally registered in August of 2002. The hosted servers are located in Beauharnois, Quebec within Canada which resides on the OVH Hosting, Inc. network.

Registrant:

WHOISGUARD, INC.

Registrar:

ENOM, INC.

Server location:

Quebec, Canada (CA)

Create date:

Saturday, August 10, 2002

Expires date:

Thursday, August 5, 2021

Updated date:

Friday, December 18, 2015

ASN:

AS16276 OVH OVH SAS,FR

Root domain:

refog.com

Whois:

1 refog.com record

The domain login.refog.com has been seen to resolve to the following 2 IP addresses.

198.100.150.204

ovh1-om.refog.com

April 7, 2016

198.100.150.203

ovh1-router.refog.com

February 23, 2016

File downloads found at URLs served by login.refog.com.

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rkl&hash=5YAXpRiXVWLn9NcL8s8uKcPb0SPBzp8VUFPGQ1WKEZ_u_xa1-BVXYg6jS6ccmLdN (rfginst-tnw.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rpm&ver=8.6.6.2600&hash=qBvVPsESNIkFgUNeb1ibVe-SlGk3jFC-O1jnMImc7XNTgqccJ26qzkWPVU5jvgJh (rfginst-tqc.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rkl&ver=8.6.6.2600&hash=3a10s1h4-EU_VFFqq0kNJOCfa7ORHZcTwYgyWIXNoQvEyG6DVIoCCBtwdWM3pku7 (rfginst-tqq.exe)

0 / 68

http://login.refog.com/mail/.../?url=download?pid=rkf&ver=8.6.0.2500&hash=yIeHCtnE6F4iK3UWcjBc-F9eY2xxaljKl0HL2y6iisH0zquk3BjVyNJGHjraHPfJ (rkl-free-setup-860.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rkl&ver=8.6.6.2600&hash=OHTn1WMCP9cMnQtpNsZUueCfa7ORHZcTwYgyWIXNoQvEyG6DVIoCCBtwdWM3pku7 (rfginst-tqq.exe)

0 / 68

http://login.refog.com/mail/.../?url=download?pid=rtm&ver=8.6.6.2600&hash=cLSFAzu9LI5rD2Ehy3avFfvHGjQj7-8n8y458vPg6HelQe3RhJF4sUUQ7zXEyaDB (rfginst-tq4.exe)

0 / 68

http://login.refog.com/mail/.../?url=download?pid=rkf&ver=8.6.0.2500&hash=MHgWpXNZNhDGGCnpcaPanl9eY2xxaljKl0HL2y6iisH0zquk3BjVyNJGHjraHPfJ (rkl-free-setup-860.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rpm&ver=8.6.6.2600&hash=IMK0r8frFnZ57UH3bQQ19--SlGk3jFC-O1jnMImc7XNTgqccJ26qzkWPVU5jvgJh (rfginst-tqc.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rkl&ver=8.6.6.2600&hash=_Z0hFdl_yw7_PbRx2odD_uCfa7ORHZcTwYgyWIXNoQvEyG6DVIoCCBtwdWM3pku7 (rfginst-tqq.exe)

0 / 68

http://login.refog.com/mail/.../?url=download?pid=rkf&ver=8.6.0.2500&hash=FS4LhDNDagIeuXdXIWG0A69cpionAkcng6ZC14xgSXEEgzUUcEO9KhyVWEvWHQq0 (rkl-free-setup-860.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rpm&ver=8.6.6.2600&hash=LJ6SA_lCYJJe2gGrrBdd5e-SlGk3jFC-O1jnMImc7XNTgqccJ26qzkWPVU5jvgJh (rfginst-tqc.exe)

0 / 68

http://login.refog.com/mail/.../?url=download?pid=rkf&ver=8.6.0.2500&hash=PlC9mh80LNUQZTsS6pdCSV9eY2xxaljKl0HL2y6iisH0zquk3BjVyNJGHjraHPfJ (rkl-free-setup-860.exe)

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rkl&hash=2YY9bbD8xlmzZN-9V7rCWMPb0SPBzp8VUFPGQ1WKEZ_u_xa1-BVXYg6jS6ccmLdN (rfginst-tnw.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rpm&ver=8.6.6.2600&hash=ew8rioHSfE9i-GUOwPY87e-SlGk3jFC-O1jnMImc7XNTgqccJ26qzkWPVU5jvgJh (rfginst-tqc.exe)

1 / 68 (PUP)

http://login.refog.com/mail/.../?url=download?pid=rkl&ver=8.6.6.2600&hash=BYr2UMdcO8tDZwkin8Vs6uCfa7ORHZcTwYgyWIXNoQvEyG6DVIoCCBtwdWM3pku7 (rfginst-tqq.exe)

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rpm&hash=4vxZHLCduEYu8rWh5xFcNV-z7W_exnGtc_sh-GSTVfsL6mCTXEcLFjzvkgiNgBzh (rfginst-tn5.exe)

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rpm&hash=SD-RNjQzHbxj-BvV8ItpZl-z7W_exnGtc_sh-GSTVfsL6mCTXEcLFjzvkgiNgBzh (rfginst-tn5.exe)

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rkl&hash=cKUHVG8ZMw2-3D-SImSyFsPb0SPBzp8VUFPGQ1WKEZ_u_xa1-BVXYg6jS6ccmLdN (rfginst-tnw.exe)

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rpm&hash=8kbUlUEptCf54ouv8iq7iF-z7W_exnGtc_sh-GSTVfsL6mCTXEcLFjzvkgiNgBzh (rfginst-tn5.exe)

0 / 68

http://login.refog.com/mail/.../?url=download?pid=rkl&ver=8.6.4.2560&hash=vNHmzl0dV4vYv6gFR9KWQPKZnsCrCtUHmbA8I1AM8QajXy6DympOaI6i5lvdk7bf (rfginst-tra.exe)

1 / 68 (inconclusive)

http://login.refog.com/mail/.../?url=download?pid=rkl&hash=qeDnwNm598g82ljcx_an7cPb0SPBzp8VUFPGQ1WKEZ_u_xa1-BVXYg6jS6ccmLdN (rfginst-tnw.exe)

The following file have been seen to comunicate with login.refog.com in live environments.

TCP » 198.100.150.204:443

UCBrowser.exe (UC Browser by UCWeb)

URL:

http://login.refog.com/

Title:

“Log In · Refog”

SSL certificate subject:

CN=*.refog.com, OU=PositiveSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

nginx/1.4.6 (Ubuntu)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.