home

80bfa25fe1f5ad0a5ec8c5edca3b0bfe.skjdfhjsdffs.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 80bfa25fe1f5ad0a5ec8c5edca3b0bfe.skjdfhjsdffs.ru is registered by proxy through REGRU-RU and was originally registered in October of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Friday, October 16, 2015

Expires date:
Sunday, October 16, 2016

Root domain:
skjdfhjsdffs.ru

Whois:
1 skjdfhjsdffs.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SPKGEOTO (M)
100.00%

File downloads found at URLs served by 80bfa25fe1f5ad0a5ec8c5edca3b0bfe.skjdfhjsdffs.ru.

1 / 68      (PUP)
http://80bfa25fe1f5ad0a5ec8c5edca3b0bfe.skjdfhjsdffs.ru/.../?f=YTo3OntzOjc6InNpdGVfaWQiO2k6MTQ3ODtzOjg6ImZpbGVfdXJsIjtzOjYwOiJodHRwOi8vVG9ycmVudDMucnUvdXBsb2Fkcy9maWxlcy8xNDE3NTQyNzAzX3RoZS1jcmV3LnRvcnJlbnQiO3M6OToiZmlsZV9uYW1lIjtzOjE2OiJUaGUgQ3Jldy50b3JyZW50IjtzOjk6ImZpbGVfdHlwZSI7czo3OiJ0b3JyZW50IjtzOjk6ImZpbGVfc2l6ZSI7ZDoxMjAwMDA7czo2OiJyYW5kb20iO2k6NDI1MjkyO3M6NDoidGltZSI7aToxNDQ1NjkxNzA2O30,  (the_crew.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.