home

dfcwa767076kfcr.olghai.ru

CORLEON GROUP LTD

Domain Information

The domain dfcwa767076kfcr.olghai.ru registered by CORLEON GROUP LTD was initially registered in June of 2014 through REGRU-REG-RIPN. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-REG-RIPN

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Thursday, June 19, 2014

Expires date:
Friday, June 19, 2015

ASN:
AS59711 FORTUNIX-AS Fortunix Networks L.P.,GB

Root domain:
olghai.ru

Whois:
1 olghai.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CORLEONGROUP.g
100.00%

The domain dfcwa767076kfcr.olghai.ru has been seen to resolve to the following IP address.

5.149.254.184
August 1, 2014

File downloads found at URLs served by dfcwa767076kfcr.olghai.ru.

1 / 68      (Adware)
http://dfcwa767076kfcr.olghai.ru/get_file/?sid=23&url=http://stream.get-tune.net/listen/144924266/-36871775/1587096407/.../Nicki_Minaj_-_Va_Va_Voom_(get-tune.net).mp3&name=Nicki_Minaj_-_Va_Va_Voom_(get-tune.net).mp3&type=mp3&size=7862815  (nicki_minaj_-_va_va_voom_(get-tune.net).exe)

URL:
http://dfcwa767076kfcr.olghai.ru/

Web server:
nginx/1.4.2 (PHP/5.4.17)

faphib.ru

javoki.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.