rusellersss.com

Fundacion Private Whois  (Proxy Registrant)

Domain Information

The domain rusellersss.com is registered by proxy through INTERNET.BS CORP. and was originally registered in January of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
INTERNET.BS CORP.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Friday, January 17, 2014

Expires date:
Saturday, January 17, 2015

Updated date:
Friday, January 17, 2014

ASN:
AS5580 HIBERNIA TripartZ B.V.,NL

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CORLEONGROUP.U, PUP.InstallMonster.CORLEONGROUP (M), PUP.InstallMonster.CORLEONG (M), PUP.InstallMonster (M)
100.00%

Dr.Web
Trojan.InstallMonster.51
12.50%

VIPRE Antivirus
Threat.4845009
12.50%

avast!
Win32:InstallMonstr-DY [PUP]
12.50%

ESET NOD32
Win32/InstallMonstr.EO potentially unwanted application
12.50%

NANO AntiVirus
Trojan.Win32.InstallMonster.dbipfy
12.50%

Agnitum Outpost
Riskware.Agent
12.50%

Sophos
Install Monster
12.50%

Avira AntiVirus
APPL/InstallMonster.Gen
12.50%

G Data
Win32.Application.Installmonstr
12.50%

Vba32 AntiVirus
Signed-Downware.InstallMonstr
12.50%

IKARUS anti.virus
PUA.InstMonster
12.50%

AVG
Adware Generic5.AXFM
12.50%

Panda Antivirus
PUP/InstallMonstr
12.50%

The domain rusellersss.com has been seen to resolve to the following IP address.

September 1, 2014

File downloads found at URLs served by rusellersss.com.

URL:
http://rusellersss.com/

Web server:
nginx/1.4.2 (PHP/5.4.17)