2b35a49483417f25c9e7615b.appsslowloads.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 2b35a49483417f25c9e7615b.appsslowloads.ru is registered by proxy through REGRU-RU and was originally registered in March of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Tuesday, March 22, 2016

Expires date:
Wednesday, March 22, 2017

ASN:
AS57062 SERVERCLUB-AS ServerClub Inc, US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Kryptik.ESCT trojan
100.00%

Reason Heuristics
PUP.InstallCube.KONTSEPT (M)
100.00%

Dr.Web
Trojan.InstallCube.974
100.00%

The domain 2b35a49483417f25c9e7615b.appsslowloads.ru has been seen to resolve to the following IP address.

r1-1-29.mta2-gene.com
April 20, 2016

File downloads found at URLs served by 2b35a49483417f25c9e7615b.appsslowloads.ru.

URL:
http://2b35a49483417f25c9e7615b.appsslowloads.ru/

Web server:
nginx (PHP/5.6.15-1~dotdeb+7.1)

30 of 36 related domains