home

cf8a6a77aba19b12baa1e1a5.qehandrmnbmb.ru

Private Person  (Proxy Registrant)

Domain Information

The domain cf8a6a77aba19b12baa1e1a5.qehandrmnbmb.ru is registered by proxy through REGRU-RU and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Monday, November 23, 2015

Expires date:
Wednesday, November 23, 2016

Root domain:
qehandrmnbmb.ru

Whois:
1 qehandrmnbmb.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize (M)
100.00%

File downloads found at URLs served by cf8a6a77aba19b12baa1e1a5.qehandrmnbmb.ru.

1 / 68      (Adware)
http://cf8a6a77aba19b12baa1e1a5.qehandrmnbmb.ru/.../?f=YTo3OntzOjc6InNpdGVfaWQiO3M6NDoiMTY1MSI7czo4OiJmaWxlX3VybCI7czo5ODoiaHR0cDovL3Rkcy50cmFmZnBhcnRuZXIucnUvMTkyQzI_a2V5d29yZD3QkdC-0LvQtdC30L3QuCDQutC-0YjQtdC6INC4INGB0L7QsdCw0LoucmFyJmNoYXJzZXQ9dXRmLTgiO3M6OToiZmlsZV9uYW1lIjtzOjQzOiLQkdC-0LvQtdC30L3QuCDQutC-0YjQtdC6INC4INGB0L7QsdCw0LoucmFyIjtzOjk6ImZpbGVfdHlwZSI7czo2OiJ3aW5yYXIiO3M6OToiZmlsZV9zaXplIjtpOjM3OTY4OTA0O3M6NjoicmFuZG9tIjtpOjg2ODM5MDtzOjQ6InRpbWUiO2k6MTQ0ODU0NzIyMTt9&mark1=all&mark5=??????? ????? ? ????  (bolezni_koshek_i_sobak.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.