home

cloclo108.datacloudmail.ru

MGL Mail.ru Internet Assets Limited

Domain Information

The domain cloclo108.datacloudmail.ru registered by MGL Mail.ru Internet Assets Limited was initially registered in September of 2013 through RU-CENTER-RU. The hosted servers are located in Rostov-Na-Donu, Rostov within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Rostov, Russia (RU)

Create date:
Wednesday, September 4, 2013

Expires date:
Sunday, September 4, 2016

ASN:
AS47764 MAILRU-AS Limited liability company Mail.Ru,RU

Root domain:
datacloudmail.ru

Whois:
1 datacloudmail.ru record

The domain cloclo108.datacloudmail.ru has been seen to resolve to the following IP address.

94.100.178.108
cloclo8-2.i.mail.ru
March 4, 2016

File downloads found at URLs served by cloclo108.datacloudmail.ru.

0 / 68
https://cloclo108.datacloudmail.ru/weblink/get/.../MultiPackBase.exe  (87f231432899a60707a6fdcd82c78708)

1 / 68      (PUP)
https://cloclo108.datacloudmail.ru/weblink/get/.../xpRc6UXcS?key=cfd3be10802c9b633d0068dc96c2f409bf737ee0  (photoshop-cs6-mariolast.exe)

0 / 68
https://cloclo108.datacloudmail.ru/weblink/get/.../RvE5zWkEq?key=9212024f30674be71f9595c8fd159ae69d4384aa  (веселые сапожки.zip)

0 / 68
https://cloclo108.datacloudmail.ru/weblink/get/.../Wotspeak ModPack 0.9.13 ver.8.1.exe  (338d3605b421a0846369f46ca6ee5911)

0 / 68
https://cloclo108.datacloudmail.ru/weblink/get/.../PsMqyU5Tp?key=4d5518eba4ac773afd4dd788c831b7d76dba4b32  (fly_iq255_drivers_x86.exe)

The following 3 files have been seen to comunicate with cloclo108.datacloudmail.ru in live environments.

TCP » 94.100.178.108:443
Cloud.exe (Cloud by Mail.Ru)

TCP » 94.100.178.108:443
Screenshoter.exe (Screenshoter by Mail.Ru)

TCP » 94.100.178.108:443
Screenshoter.exe (Screenshoter by Mail.Ru)

URL:
http://cloclo108.datacloudmail.ru/

Google Analytics:
UA-43037165

Title:
“Облако Mail.Ru”

SSL certificate subject:
CN=*.datacloudmail.ru, OU=IT, O=LLC Mail.Ru, L=Moscow, S=RUSSIAN FEDERATION, C=RU

SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US

Web server:
Tengine

cldmail.ru

mail.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.