The domain sputnikmailru.cdnmail.ru registered by MGL Mail.ru Internet Assets Limited was initially registered in November of 2008 through RU-CENTER-RU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrant:
MGL Mail.ru Internet Assets Limited
Server location:
Moscow City, Russia (RU)
Create date:
Friday, November 21, 2008
Expires date:
Monday, November 21, 2016
ASN:
AS47764 MAILRU-AS Limited liability company Mail.Ru
Google Safe Browsing:
unwanted
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Optional.MailRu.J, PUP.Optional.MailRu.Q, (M), PUP.Optional.MailRu.M, PUP.Optional.MailRu.T, PUP.Optional.Startup.J, PUP.Optional.Startup.M, Win32.Generic.MailRu, Win32.Generic.MailRu.Meta, PUP.DefenseM (M)
100.00%
Rising Antivirus
PE:Trojan.RuMail!1.6574
44.19%
Trend Micro House Call
TROJ_GEN.F47V0122, TROJ_GEN.F47V0205, TROJ_GEN.F47V0409, TROJ_GEN.F47V0428, TROJ_GEN.R0C1H07AF15, Suspicious_GEN.F47V0422, Suspicious_GEN.F47V0430
44.19%
McAfee
Artemis!590212835370, Artemis!1F5841A47362, Artemis!15145398473E
27.91%
Bkav FE
W32.HfsAdware
13.95%
Dr.Web
Trojan.DownLoader13.1014, Trojan.DownLoader13.13229
13.95%
Panda Antivirus
Generic Suspicious
2.33%
Baidu Antivirus
Adware.Win32.iBryte.RuMail
2.33%
herdProtect (fuzzy)
a variant of b990b13bfb93b7a83291095198f0be6ab21a2f97
2.33%
MicroWorld eScan
Gen:Variant.Kazy.611785
2.33%
Bitdefender
Gen:Variant.Kazy.611785
2.33%
NANO AntiVirus
Trojan.Win32.Dapato.drnvmu
2.33%
Lavasoft Ad-Aware
Gen:Variant.Kazy.611785
2.33%
The domain sputnikmailru.cdnmail.ru has been seen to resolve to the following 2 IP addresses.
moscow.cdnmail.ru
February 22, 2016
moscow.cdnmail.ru
February 6, 2016
File downloads found at URLs served by sputnikmailru.cdnmail.ru.
URL:
http://sputnikmailru.cdnmail.ru/
SSL certificate subject:
CN=*.mail.ru, OU=IT, O=LLC Mail.Ru, L=Moscow, S=RUSSIAN FEDERATION, C=RU
SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US
Related Domains