home

f276acf16684b9247373a9c1.xxcsdfafsdfs.ru

Private Person  (Proxy Registrant)

Domain Information

The domain f276acf16684b9247373a9c1.xxcsdfafsdfs.ru is registered by proxy through REGRU-RU and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Wednesday, February 10, 2016

Expires date:
Friday, February 10, 2017

Root domain:
xxcsdfafsdfs.ru

Whois:
1 xxcsdfafsdfs.ru record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize
100.00%

File downloads found at URLs served by f276acf16684b9247373a9c1.xxcsdfafsdfs.ru.

1 / 68      (Adware)
http://f276acf16684b9247373a9c1.xxcsdfafsdfs.ru/api/web/getInstaller?transaction_id=193708307&token=43327f7c3a41ffdba19f5fa53274021c&return_url=http://.../icq.exe&source=&format=json  (knock_knock_2015.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.