home

e.mail.ru

MGL Mail.ru Internet Assets Limited

Domain Information

The domain e.mail.ru registered by MGL Mail.ru Internet Assets Limited was initially registered in September of 1997 through RU-CENTER-REG-RIPN. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Saturday, September 27, 1997

Expires date:
Saturday, October 1, 2016

ASN:
AS47764 MAILRU-AS Limited liability company Mail.Ru,RU

Root domain:
mail.ru

Whois:
4 mail.ru records

The domain e.mail.ru has been seen to resolve to the following 4 IP addresses.

94.100.180.216
e.mail.ru
June 26, 2014

94.100.180.215
e.mail.ru
June 26, 2014

217.69.139.216
e.mail.ru
June 26, 2014

217.69.139.215
e.mail.ru
June 26, 2014

File downloads found at URLs served by e.mail.ru.

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=DICOMViewerLite.exe&cte=binary&notype=1&file=DICOMViewerLite.exe&mode=attachment&channel  (614f036dc0303b6641d17a7afee26bed)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=16A56-M1-56.exe&cte=binary&notype=1&file=16A56-M1-56.exe&mode=attachment&channel  (f45b647e89840cc0171878ef610561b7)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=16A56-M1-60.exe&cte=binary&notype=1&file=16A56-M1-60.exe&mode=attachment&channel  (b6472202e421e8aa4e4e02a6a8465ba9)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=rubezh_firesec_3_14.exe&cte=binary&notype=1&file=rubezh_firesec_3_14.exe&mode=attachment&channel  (a903210f85f9518be81ddc813100ffec)

0 / 68
https://e.mail.ru/cgi-bin/.../x-msdownload&cn=deductor5.1setupacademic.exe&cte=binary&notype=1&file=deductor5.1setupacademic.exe&mode=attachment&channel  (7a6ea9c513b7f10451aba559d50276ef)

0 / 68
https://e.mail.ru/attachment/.../0;1  (020.htm)

0 / 68
https://e.mail.ru/.../getmsg?id=14703919560000001011  (message14703919560000001011.eml)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=???? 90_????????? 1 ?? 30 ???.exe&cte=binary&notype=1&file=???? 90_????????? 1 ?? 30 ???.exe&mode=attachment&channel  (тест 90_сложность 1 до 30 мая.exe)

0 / 68
https://e.mail.ru/cgi-bin/.../zip&cn=wot-shaitan.exe.zip&cte=binary&notype=1&file=wot-shaitan.exe.zip&mode=attachment&channel  (f1131c05194409cc25126e4e358358f1)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=Project1.exe&cte=base64&notype=1&file=Project1.exe&mode=attachment&channel  (6987495b9f6d3b1468acf732fa1d5b06)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=desktopmania-setup.exe&cte=base64&notype=1&file=desktopmania-setup.exe&mode=attachment&channel  (15177de2850a857b77b58896ea4b0c00)

0 / 68
https://e.mail.ru/cgi-bin/.../x-msdownload&cn=Signals ISIG Basic 64 bit.msi&cte=binary&notype=1&file=Signals ISIG Basic 64 bit.msi&mode=attachment&channel  (79be6acb2b409b2f0e95079e0bc9392f)

0 / 68
https://e.mail.ru/attachment/.../0;1  (0.htm)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=4. ????????(??????????? ???????? ???????).exe&cte=binary&notype=1&file=4. ????????(??????????? ???????? ???????).exe&mode=attachment&channel  (4. რეიტინგი(დასაბამიდან არაბების ჩათვლით).exe)

1 / 68      (Adware)
https://e.mail.ru/.../getattach?file=firefox_download_2016.exe&id=14696925980000000820;0;1&mode=attachment&notype=1&x-email=jomart_studio@mail.ru  (6fdb65384c81101dd7cd8f49d8460ddd)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=Setup_H7.exe&cte=binary&notype=1&file=Setup_H7.exe&mode=attachment&channel  (1343034243cbea46a5be0fe6266a9edd)

0 / 68
https://e.mail.ru/.../getmsg?id=14413759590000000088  (message14413759590000000088.eml)

0 / 68
https://e.mail.ru/message/.../  (загруженное.htm)

2 / 68
https://e.mail.ru/.../getattach?file=WinDjView-2.1-Setup.exe&id=14487340780000000281;0;1&mode=attachment&notype=1&x-email=ms.emraliyeva@mail.ru  (be7854e8f7d922c2269fabd448d82f9e)

2 / 68      (PUP)
https://e.mail.ru/cgi-bin/link?check=1&cnf=99a287&url=https://.../exe1&msgid=14654726080000000405;0;0&x-email=kaskad-06@mail.ru&js=1&redir=1  (magent_rfrset_damigo.exe)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=Staj.exe&cte=binary&notype=1&file=Staj.exe&mode=attachment&channel  (02db2f03dd140cab7d83e4b925ada906)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=Menu_2.1.4.exe&cte=binary&notype=1&file=Menu_2.1.4.exe&mode=attachment&channel  (322c2b2acb68bf82c1e30ed0133f0405)

2 / 68      (PUP)
https://e.mail.ru/cgi-bin/link?check=1&cnf=4b9fff&url=https://.../exe1&msgid=14500951540000000881;0;0&x-email=boss.milana@inbox.ru&js=1&redir=1  (magent_rfrset_damigo.exe)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=mHotspot_setup_latest.exe&cte=binary&notype=1&file=mHotspot_setup_latest.exe&mode=attachment&channel  (lfg0matl.exe)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=ConventFrom axali versia.exe&cte=binary&notype=1&file=ConventFrom axali versia.exe&mode=attachment&channel  (2f0d86a1b7c83eb47b1f9980c47ded15)

0 / 68
https://e.mail.ru/.../getattach?file=5 ??? ????.exe&id=14673457910000000559;0;1&mode=attachment&notype=1&x-email=dana.malgazhdarovna.71@mail.ru  (5 топ тест.exe)

0 / 68
https://e.mail.ru/.../getattach?file=1 ??? ????.exe&id=14675265630000000655;0;1&mode=attachment&notype=1&x-email=dana.malgazhdarovna.71@mail.ru  (1 топ тест.exe)

0 / 68
https://e.mail.ru/.../getattach?file=6 ??? ????.exe&id=14676042220000000170;0;2&mode=attachment&notype=1&x-email=dana.malgazhdarovna.71@mail.ru  (6 топ тест.exe)

0 / 68
https://e.mail.ru/.../getattach?file=2 ??? ????.exe&id=14677101330000000144;0;3&mode=attachment&notype=1&x-email=dana.malgazhdarovna.71@mail.ru  (2 топ тест.exe)

0 / 68
https://e.mail.ru/cgi-bin/.../octet-stream&cn=STRUCTURA CALCULATORULUI.exe&cte=binary&notype=1&file=STRUCTURA CALCULATORULUI.exe&mode=attachment&channel  (b5455bad51f1c426fc514eda3f96ff86)

 
Latest 30 of 301 download URLs

The following 157 files have been seen to comunicate with e.mail.ru in live environments.

TCP » 94.100.180.215:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.69.139.216:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 217.69.139.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 94.100.180.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.69.139.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 94.100.180.216:443
online-guardian-v2.exe

TCP » 94.100.180.216:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.100.180.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.69.139.215:443
produpd.exe (VDI Shared Product Update Tools by VDI)

TCP » 94.100.180.216:443
produpd.exe (VDI Shared Product Update Tools by VDI)

TCP » 217.69.139.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 94.100.180.215:443
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 217.69.139.215:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 94.100.180.215:443
amigo.exe (Amigo by Mail.Ru)

TCP » 94.100.180.216:443
produpd.exe (Vest's software office by Vest')

TCP » 217.69.139.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.69.139.215:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.69.139.215:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.69.139.216:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 94.100.180.215:443
produpd.exe (produpd.exe by Vested Development, Inc)

 
Latest 20 of 418 files

URL:
http://e.mail.ru/

Title:
“Вход - Почта Mail.Ru”

Description:
“Почта Mail.Ru - крупнейшая бесплатная почта, быстрый и удобный интерфейс, неограниченный объем ящика, надежная защита от спама и вирусов, мобильная версия и приложения для смартфонов. А также доступ по IMAP, SMS-уведомления, интерфейс на разных я...”

SSL certificate subject:
CN=*.mail.ru, OU=IT, O=LLC Mail.Ru, L=Moscow, S=RUSSIAN FEDERATION, C=RU

SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US

Web server:
nginx

Facebook:
Likes:  407
Shares:  2,174
Comments:  636

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.