dev.drp.su
Private Person (Proxy Registrant)
Domain Information
The domain dev.drp.su is registered by proxy through R01-REG-FID and was originally registered in June of 2009. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrant:
Private Person
Server location:
Noord-Holland, Netherlands (NL)
Create date:
Wednesday, June 17, 2009
Expires date:
Friday, June 17, 2016
Scanner detections:
Detections (85% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Bundler.KuzyakovArtur.Meta (L), PUP.KuzyakovArturVyacheslavovichIP.N, Win32.Generic.KuzyakovArturVyacheslavovichIP.Installer.Meta, PUP.Bundler.KuzyakovArtur.Installer.Meta (L), PUP.Bundler.Kuzyakov.Meta (L), PUP.Bundler (L)
84.62%
Avira AntiVirus
SPR/Mrspt.A, APPL/Mrspt.A
46.15%
Rising Antivirus
PE:Trojan.RuMail!1.6574
35.90%
Trend Micro House Call
TROJ_GEN.F47V0723, TROJ_GEN.F47V0808, TROJ_GEN.F47V0803, TROJ_GEN.F47V1222, TROJ_GEN.F47V0411, WORM_SPYBOT.BMH, TROJ_GEN.F47V0409
17.95%
Dr.Web
Adware.Downware.9957
7.69%
Norman
Suspicious_Gen4.DUWHA
2.56%
Vba32 AntiVirus
Trojan.Genome.agxmv
2.56%
McAfee
Artemis!1321AE091430
2.56%
The domain dev.drp.su has been seen to resolve to the following 12 IP addresses.
redstation.com
April 2, 2016
h188-227-175-225.host.redstation.co.uk
April 2, 2016
redstation.com
February 14, 2016
redstation.com
February 14, 2016
h88-150-206-2.host.redstation.co.uk
February 1, 2016
h88-150-137-207.host.redstation.co.uk
February 1, 2016
redstation.com
February 1, 2016
vps16008.5gbps.com
April 26, 2014
dedicated.coretek.ru
February 8, 2014
File downloads found at URLs served by dev.drp.su.
Latest 30 of 41 download URLs
The following 13 files have been seen to comunicate with dev.drp.su in live environments.
Statistics are for the previous month.