mdrv.ru
Private Person (Proxy Registrant)
Domain Information
The domain mdrv.ru is registered by proxy through REGRU-RU and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrant:
Private Person
Server location:
Nord-Pas-De-Calais, France (FR)
Create date:
Sunday, November 29, 2015
Expires date:
Tuesday, November 29, 2016
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Inergen (M), PUP (M), PUP.KONNEKTS (M)
100.00%
VIPRE Antivirus
Threat.4150696
50.00%
ESET NOD32
Win32/Kryptik.FAFA trojan
25.00%
Dr.Web
Trojan.LoadMoney.336
25.00%
Emsisoft Anti-Malware
Gen:Variant.Strictor.108644
25.00%
The domain mdrv.ru has been seen to resolve to the following 2 IP addresses.
ns334112.ip-37-187-118.eu
August 2, 2016
mizma448.vds
June 30, 2016
File downloads found at URLs served by mdrv.ru.
Title:
“Softportal - Самая большая база файлов c постоянным обновлением.”
Web server:
nginx/1.0.14 (PHP/5.3.10)
Related Domains
