9j0rfx9xy9jn148.cioveup.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 9j0rfx9xy9jn148.cioveup.ru is registered by proxy through REGRU-REG-RIPN and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-REG-RIPN

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Thursday, August 7, 2014

Expires date:
Friday, August 7, 2015

ASN:
AS59711 FORTUNIX-AS Fortunix Networks L.P.,GB

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Dropper
100.00%

avast!
Win32:InstallMonstr-FH [PUP]
100.00%

Dr.Web
Trojan.InstallMonster.744
100.00%

ESET NOD32
Win32/InstallMonstr.EN (variant)
100.00%

IKARUS anti.virus
not-a-virus:Downloader.Monstruos
100.00%

The domain 9j0rfx9xy9jn148.cioveup.ru has been seen to resolve to the following IP address.

August 17, 2014

File downloads found at URLs served by 9j0rfx9xy9jn148.cioveup.ru.

URL:
http://9j0rfx9xy9jn148.cioveup.ru/

Web server:
nginx/1.4.2 (PHP/5.4.17)