hollyhock.greypro.ru

Private Person  (Proxy Registrant)

Domain Information

The domain hollyhock.greypro.ru is registered by proxy through REGRU-RU and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Moscow City, Russia (RU)

Create date:
Friday, February 12, 2016

Expires date:
Sunday, February 12, 2017

ASN:
AS197068 QRATOR HLL LLC,RU

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
HW32.Packed
100.00%

MicroWorld eScan
Gen:Variant.Kazy.506293
100.00%

K7 AntiVirus
Trojan
100.00%

Trend Micro House Call
TROJ_GEN.R08NC0PL714
100.00%

avast!
Win32:Installer-U [PUP]
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Plocust
100.00%

Bitdefender
Gen:Variant.Kazy.506293
100.00%

Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
100.00%

Lavasoft Ad-Aware
Gen:Variant.Kazy.506293
100.00%

Dr.Web
Trojan.LoadMoney.336
100.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
100.00%

Trend Micro
TROJ_GEN.R08NC0PL714
100.00%

Sophos
Generic PUA MC
100.00%

Avira AntiVirus
TR/Dropper.Gen
100.00%

G Data
Gen:Variant.Kazy.506293
100.00%

The domain hollyhock.greypro.ru has been seen to resolve to the following IP address.

February 29, 2016

File downloads found at URLs served by hollyhock.greypro.ru.

URL:
http://hollyhock.greypro.ru/

Web server:
QRATOR