www.onnumaratoplar.org
default contact
Domain Information
Currently this domain has been known to host various forms of malware. The hosted servers are located in Istanbul, Istanbul within Turkey which resides on the RIPE Network Coordination Centre network.
Registrant:
default contact
Registrar:
FBS Inc. (R1783-LROR)
Server location:
Istanbul, Turkey (TR)
ASN:
AS42910 SADECEHOSTING-COM Hosting Internet Hizmetleri Sanayi ve Ticaret Anonim Sirketi,TR
Scanner detections:
Malware distribution (75% detected)
Scan engine
Details
Detections
avast!
Malware-gen, Win32:Dropper-gen [Drp], Win32:Malware-gen
100.00%
McAfee
Artemis!2404983CA17F, Artemis!3C46DDE8502C, Artemis!7C39CBA808CB
100.00%
Trend Micro House Call
TROJ_GE.618E096C, TROJ_GEN.F47V0520, Suspicious_GEN.F47V0613
100.00%
Qihoo 360 Security
Win32/Trojan.Multi.daf, Win32/Trojan.d1a
100.00%
Dr.Web
Trojan.PackedENT.24553, Trojan.DownLoader11.10368
66.67%
AVG
Trojan horse Ransomer.DDK, Generic10_c
66.67%
MicroWorld eScan
Gen:Variant.Strictor.56845
66.67%
Malwarebytes
Trojan.Ransom.Blocker, Trojan.FakeChrome
66.67%
Norman
Suspicious_Gen5.ARCQR, Suspicious_Gen4.GISVC
66.67%
Bitdefender
Gen:Variant.Strictor.56845
66.67%
Lavasoft Ad-Aware
Gen:Variant.Strictor.56845
66.67%
F-Secure
Gen:Variant.Strictor.56845
66.67%
Emsisoft Anti-Malware
Gen:Variant.Strictor.56845
66.67%
G Data
Gen:Variant.Strictor.56845
66.67%
IKARUS anti.virus
Win32.SuspectCrc
66.67%
The domain www.onnumaratoplar.org has been seen to resolve to the following 3 IP addresses.
209-99-40-226.fwd.datafoundry.com
September 3, 2014
89-169-238-213.offlinebilisim.com
July 31, 2014
static-11-80-135-78.sadecehosting.net
June 21, 2014
File downloads found at URLs served by www.onnumaratoplar.org.
The following 4 files have been seen to comunicate with www.onnumaratoplar.org in live environments.
URL:
http://www.onnumaratoplar.org/
Title:
“Account Suspended”
Related Domains
