home

bf3509424e604cdabeebccc5.qehandrmnbmb.ru

Private Person  (Proxy Registrant)

Domain Information

The domain bf3509424e604cdabeebccc5.qehandrmnbmb.ru is registered by proxy through REGRU-RU and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Monday, November 23, 2015

Expires date:
Wednesday, November 23, 2016

Root domain:
qehandrmnbmb.ru

Whois:
1 qehandrmnbmb.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize
100.00%

File downloads found at URLs served by bf3509424e604cdabeebccc5.qehandrmnbmb.ru.

1 / 68      (Adware)
http://bf3509424e604cdabeebccc5.qehandrmnbmb.ru/.../?f=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,,  (crashes-fix-v_1_0_0.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.