home

157adfc24d1749a86057a67e1a47a285.skjdfhjsdffs.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 157adfc24d1749a86057a67e1a47a285.skjdfhjsdffs.ru is registered by proxy through REGRU-RU and was originally registered in October of 2015. Currently this domain has been known to host various forms of malware.
Registrar:
REGRU-RU

Create date:
Friday, October 16, 2015

Expires date:
Sunday, October 16, 2016

Root domain:
skjdfhjsdffs.ru

Whois:
1 skjdfhjsdffs.ru record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP (M)
100.00%

File downloads found at URLs served by 157adfc24d1749a86057a67e1a47a285.skjdfhjsdffs.ru.

1 / 68      (Malware)
http://157adfc24d1749a86057a67e1a47a285.skjdfhjsdffs.ru/.../?f=YTo2OntzOjc6InNpdGVfaWQiO3M6NDoiMTM0NSI7czo4OiJmaWxlX3VybCI7czo3NDoiaHR0cDovL3pha2VyLnJ1L2Zvby8yOS9zcG9ydF9mdXRib2xpc3Rfc3RhZGlvbl96ZWxlbnl5X2dhem9uXzE5MjB4MTIwMC5qcGciO3M6OToiZmlsZV9uYW1lIjtzOjQxOiJzcG9ydF9mdXRib2xpc3Rfc3RhZGlvbl96ZWxlbnl5X2dhem9uLmpwZyI7czo5OiJmaWxlX3R5cGUiO3M6NToiaW1hZ2UiO3M6OToiZmlsZV9zaXplIjtpOjMyNDMwMjtzOjY6InJhbmRvbSI7aTo4NTMwMTt9  (sport_futbolist_stadion_zelenyy_gazon.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.