home

zona.ru.sl06.ml

Domain Information

Server location:
Moscow City, Russia (RU)

ASN:
AS48172 OVERSUN Oversun Ltd,RU

Root domain:
sl06.ml

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize.Installer (M), PUP.ITLogistykaTOV.Installer (M), PUP.Zona (L)
100.00%

Dr.Web
Trojan.Zadved.384
8.33%

ESET NOD32
Win32/Dlhelper.E potentially unwanted application
8.33%

The domain zona.ru.sl06.ml has been seen to resolve to the following 2 IP addresses.

185.53.177.9
June 18, 2016

188.127.239.133
shared-15.smartape.ru
February 26, 2016

File downloads found at URLs served by zona.ru.sl06.ml.

1 / 68      (Adware)
http://zona.ru.sl06.ml/download.php  (zonasetup.exe)

The following 2 files have been seen to comunicate with zona.ru.sl06.ml in live environments.

TCP » 188.127.239.133:80
online-guardian-v2.0.9.exe

TCP » 185.53.177.9:80
fb-commander.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.