instigate.grey-group.ru

Private Person  (Proxy Registrant)

Domain Information

The domain instigate.grey-group.ru is registered by proxy through REGRU-RU and was originally registered in February of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Moscow City, Russia (RU)

Create date:
Friday, February 12, 2016

Expires date:
Sunday, February 12, 2017

ASN:
AS197068 QRATOR HLL LLC,RU

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
HW32.Packed
100.00%

MicroWorld eScan
Gen:Variant.Adware.Kazy.432610
100.00%

McAfee
Packed-CQ
100.00%

Malwarebytes
PUP.Optional.LoadMoney
100.00%

K7 AntiVirus
Trojan
100.00%

NANO AntiVirus
Trojan.Win32.Plocust.dknizx
100.00%

Trend Micro House Call
TROJ_GEN.F0C2C00LR14
100.00%

avast!
Win32:Installer-U [PUP]
100.00%

Clam AntiVirus
Win.Adware.Agent-33092
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Plocust
100.00%

Bitdefender
Gen:Variant.Adware.Kazy.432610
100.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.Kazy.432610
100.00%

Sophos
Troj/LdMon-J
100.00%

Comodo Security
Application.Win32.LoadMoney.~L
100.00%

F-Secure
Gen:Variant.Adware.Kazy.432610
100.00%

The domain instigate.grey-group.ru has been seen to resolve to the following IP address.

March 2, 2016

File downloads found at URLs served by instigate.grey-group.ru.

URL:
http://instigate.grey-group.ru/

Web server:
QRATOR