» ojv0enbdgnltq50.vrnserver.ru
Overview
Analysis
IPs Addresses (2)
Downloads (19)
Website Detail
Related Domains (151)

ojv0enbdgnltq50.vrnserver.ru

Private Person (Proxy Registrant)

Domain Information

The domain ojv0enbdgnltq50.vrnserver.ru is registered by proxy through REGRU-RU and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.

Registrant:

Private Person

Registrar:

REGRU-RU

Server location:

Moscow City, Russia (RU)

Create date:

Friday, February 20, 2015

Expires date:

Saturday, February 20, 2016

ASN:

AS197695 AS-REGRU _Domain names registrar REG.RU_, Ltd,RU

Root domain:

vrnserver.ru

Whois:

1 vrnserver.ru record

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Amonitize, Threat.Win.Reputation.IMP, PUP.Amonitize (M), PUP.Amonitize.Installer (M)

100.00%

Dr.Web

Trojan.InstallMonster.1203, Trojan.InstallMonster.1207

21.05%

VIPRE Antivirus

Threat.4150696, Trojan.Win32.Generic

21.05%

Avira AntiVirus

APPL/InstallMonst.KK, APPL/InstallMon.enid

21.05%

AVG

InstallMonstr

21.05%

Bkav FE

W32.HfsAdware

21.05%

Agnitum Outpost

Riskware.Agent

21.05%

ESET NOD32

Win32/InstallMonstr.FF potentially unwanted application

15.79%

herdProtect (fuzzy)

a variant of 07fe5a68f1c0db97455385a24f2657dc1b0196cf, a variant of 327fd83ecf92c7259153fcc3ff6bc5342ef59652, a variant of 476dbb614b95fc873dcd919a45e19621566a8afe

15.79%

AhnLab V3 Security

PUP/Win32.InstallMonster

10.53%

Emsisoft Anti-Malware

Gen:Variant.Graftor.172020

10.53%

F-Secure

Gen:Variant.Graftor.172020

10.53%

Lavasoft Ad-Aware

Gen:Variant.Graftor.172020

10.53%

MicroWorld eScan

Gen:Variant.Graftor.172020

10.53%

Bitdefender

Gen:Variant.Graftor.172020

10.53%

The domain ojv0enbdgnltq50.vrnserver.ru has been seen to resolve to the following 2 IP addresses.

194.58.56.199

February 26, 2016

194.58.56.195

February 25, 2016

File downloads found at URLs served by ojv0enbdgnltq50.vrnserver.ru.

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNDIwNiIsInVybCI6Imh0dHA6Ly9kLnJ1dG9yLm9yZy9kb3dubG9hZC8zMjM0MzIiLCJuYW1lIjoiUGlubmFjbGUxNyIsInR5cGUiOiJ0b3JyZW50Iiwic2l6ZSI6IjcwMDciLCJybmQwIjozMTU0NTUzNjkxODU2NX0 (pinnacle17.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/cHJmeXdmZ25zb2dlbW14Z2tzbmhuZmtqY215bW15eWV7InZlciI6IjEiLCJzaWQiOiIyMTcxIiwidXJsIjoiaHR0cDovL2ZpbGVzZGF0YWNlbnRlci5ydS9maWxlcy9NaWNyb3NvZnQtT3V0bG9vay0yMDA3LU9ubGluZS1JbnN0YWxsZXIudG9ycmVudCIsIm5hbWUiOiJNaWNyb3NvZnQtT3V0bG9vay0yMDA3LU9ubGluZS1JbnN0YWxsZXIudG9ycmVudCIsInR5cGUiOiJ0b3JyZW50Iiwic2l6ZSI6MzAwMDAwMCwicm5kMCI6MTM0MjUxNDc1NTY2OTl9 (microsoft_outlook_2007_online_installer.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/d3dhd2ZheGlkYXZzdWtianJvZ3drbndpZHJtZ3l3cHVlensic2lkIjoiMjAzMCIsInVybCI6Imh0dHA6XC9cL3MyLmZpbGUtc3BhY2Uub3JnXC9kb3duXC9OT00zWGZKT3JMXC8xNDI1MjM5MDg2XC9vOVR5Sm5LemRMQXZGeksteE1uSnhBXC8xMjgyXC8wXC8xMjgyXC9TY18xNC0tU2luZ2xlLnJhciIsIm5hbWUiOiJTY18xNC0tU2luZ2xlLnJhciIsInR5cGUiOiJyYXIiLCJzaXplIjoiMTA2NDgxMjciLCJ2ZXIiOiIxIiwicm5kMCI6IjY4Mjc2MmVmZGNjNWVhOGI3MzFjZmRjMWEwZDEzZTRiIn0, (sc_14_single.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/YmRwcXJoc2Jtb2l3b2VqYW5zbXpibGhwbGRiZHVtYXJzeHRoYWh7InNpZCI6Njc5NywidXJsIjoiaHR0cDpcL1wvdXBsb2FkZWQubmV0XC9maWxlXC9hcXI5ZmpvN1wvQ2hlcl9idXNobGF0eTExLnJhciIsIm5hbWUiOiJDaGVyX2J1c2hsYXR5MTEucmFyIiwidHlwZSI6ImFyY2hpdmUiLCJzaXplIjo5MjgwMDAsInZlciI6IjEiLCJybmQwIjoiNzg5YzY2MzVlMDM0ZWJlMzUyNDc2YzFjNjZhOTlhNzgifQ,, (cher_bushlaty11.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/eXN5aWdwamd4dWxrY2hveHlnaG1iZG5ldnd1eyJzaWQiOiI2NzM2IiwidXJsIjoiaHR0cDpcL1wvcGlyYXQuY2FcL2Rvd25sb2FkLnBocD9pZD00MjIzOCIsIm5hbWUiOiImcXVvdDtjaGVybmllX2J1c2hsYXRpJnF1b3Q7Xy1fYWxla19bcGlyYXQuY2FdXzExODY0NC50b3JyZW50IiwidHlwZSI6InRvcnJlbnQiLCJzaXplIjoiMTU0NDgiLCJ2ZXIiOiIxIiwicm5kMCI6IjkyM2MwN2JjZjM3OWFmMjgwNjhkNTc2Mjg4MDY2MWY1In0, (_quot_chernie_bushlati_quot____alek__pirat.ca__118644.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/.../file_out.php?data=UQ0xUwNKRDBbAwEKFQFVWFIPRm9ZWQRWEwwACAEJDRlKCwRbEEVCW0ACQg1ZAwoSXxZNQQ1OHQYeVQdDQloSHF9CUE1fWFsEQR8FGANBXw5WQEpJXRULCQMHHX1ZVBBWQlgHRm9_UQRQUlI-AAAABD1qYQQ-Yl9CQwNbXVJPV0hVFVlKCwBbEENZQwdmWFNDCVkKBFIIAQwSCAcKFQBLXkASV0ISDBEDAw1De3USDBEDAAJbEFJCWBVKVEU-RFVCRAtWXxVaQQoEDUAIARlREAtDDVoDE0cNU0RWWBBUEwwSCAQKFTVQXw9DCUMKBlQDE0cNU0RWWBBUbkEEQENZWAwbCkRbBAoSAUwLEQFVEAtDDVUDE1QOR15ERRsbCkRbAAoSZTcbCkRbAwUKFQtKbkQMU0JEaBFaQ1IEXBILVVgJCkRbBgoSWQNUVBVaQQoDD1gbfF4CQF9DWARNbngHVFlTUj0LAQdSbWNgBD1pXkUVU1JcUkxcSVJDCUMKA1gbRU4RVxILRFgMCxUSV0RFR0ACQg1VCBJDXhhcEwwICAEDAloIAwJZCgtDDVMOCxUWV1JdVhFNVEUiU0RVUA1LSBVaQQoBDUAJEwwSCAcKFRdKVEU-W1QSDBEDBQ1DAAcID0ACQg1VCBJEXg9cEwwICAEEBVcLAQRRAQILRFgOCxUTV1ZVRQdLEwwSCAcEDUBRRUMRCB8fVQdDQloSHF9CUE1fVVFWB0JGTltPSQFOf1lTRQ1KXlEVbX9WUQtaVGhTAgADaDFpAmgxXUJEVgBVVBkESlUeXxZUXRVaQQoGDUBKRFU-W1QSDAsDAQwSCAcKFRFMU2gIVgISDAsDAQwSCAMKFRRcQxVaQQoBDUAIEwwSCAEBDUBWQVITU0RfRT1QVRVaQQoBDUAKEwwcTw,,&nocache=2f5a7ba770b4 (microsoft_office_2003_sp3_portable.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNjMxOCIsInVybCI6Imh0dHA6Ly9wc2lmcmVlLmNvbS90b3JyZW50cy8xL1twc2lmcmVlLmNvbV1ndGEtc2FuLWFuZHJlYXMta3JpbWluYWxuYXlhLXJvc3NpeWEudG9ycmVudCIsIm5hbWUiOiJHdGEtc2FuLWFuZHJlYXMta3JpbWluYWxuYXlhLXJvc3NpeWEiLCJ0eXBlIjoidG9ycmVudCIsInNpemUiOiI5MjgwMCIsInJuZDAiOjg4OTQxNzAwNTcwMjg1fQ (gta_san_andreas_kriminalnaya_rossiya.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNDYxNyIsInVybCI6Imh0dHA6Ly9yZXRyaWNhLnJ1L2luc3RhbGwuZXhlIiwibmFtZSI6Imluc3RhbGwuZXhlIiwidHlwZSI6InNldHVwIiwic2l6ZSI6IjYxMjgwMDAiLCJybmQwIjo2NjA2MjcyNTQyODQ5MX0 (install.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNDUzMSIsInVybCI6Imh0dHA6Ly9rYWNobnVsLm9yZy9maWxlcy9IdW50aW5nX3VubGltKDYxNS41MiBNQikudG9ycmVudCIsIm5hbWUiOiJIdW50aW5nLXVubGltaXRlZC0yIiwidHlwZSI6InRvcnJlbnQiLCJzaXplIjoiOTI4MDAiLCJybmQwIjo3MjI1NDQwNjY2MDc5NX0 (hunting_unlimited_2.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/b2p2anVmaGVwdmRleHsidmVyIjoiMSIsInNpZCI6IjU0MjAiLCJ1cmwiOiJodHRwOi8vb2ZmaWNlLW1pY3Jvc29mdC0yMDEzLmNvbS9lbmdpbmUvZ28ucGhwP3VybD1hSFIwY0RvdkwyRnNiQzFrYjNkdWJHOWhaSE01TG5Cd0xuVmhMMDFwWTNKdmMyOW1kRTltWm1salpWSjFjeTU2YVhBJTNEIiwibmFtZSI6Ik1pY3Jvc29mdE9mZmljZVJ1cy56aXAiLCJ0eXBlIjoiYXJjaGl2ZSIsInJuZDAiOjYwNTQ0ODEwMjU3OH0 (microsoftofficerus.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/dnl4b2V2dHhseHFnb2thY3B5eyJzaWQiOiIyMDMwIiwidXJsIjoiaHR0cDpcL1wvczIuZmlsZS1zcGFjZS5vcmdcL2Rvd25cL3FLcmZ2MDFvME9cLzE0MjUyNDIxMjBcL0pBb09QX0FSUmhuMFdxc0pMUDFSU2dcLzc3OThcLzBcLzc3OThcL2luZm9ybWF0aWthX3BwdF8wMTAucHB0eCIsIm5hbWUiOiJpbmZvcm1hdGlrYV9wcHRfMDEwLnBwdHgiLCJ0eXBlIjoicHB0eCIsInNpemUiOiI4Njc0NTQiLCJ2ZXIiOiIxIiwicm5kMCI6IjIxYmE0MGNkMjg3YjdiZjg1NDNlMmQzYzVkNTkwOWVmIn0, (informatika_ppt_010.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/enlic3hicm9mc2d2bW5ocWh3eHpransic2lkIjoiMjAzMCIsInVybCI6Imh0dHA6XC9cL3MyLmZpbGUtc3BhY2Uub3JnXC9kb3duXC9CSkdLVVpYRWZwXC8xNDI1OTI5NjI2XC9uVnU4ekprMlc2ZkEzQkZITVlWckVnXC83Nzk4XC8wXC83Nzk4XC9oaXN0b3J5X3BwdF8wNDQucHB0eCIsIm5hbWUiOiJoaXN0b3J5X3BwdF8wNDQucHB0eCIsInR5cGUiOiJwcHR4Iiwic2l6ZSI6IjQzMjE4NzgiLCJ2ZXIiOiIxIiwicm5kMCI6IjEzYjkyZjY2NTczOGFhYjA3Y2ViZWU0OTZkZTI0OTNhIn0, (history_ppt_044.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNTE1MiIsInVybCI6Imh0dHA6Ly9sZWV0b3IucnUvdG9ycmVudHMvW0xlZVRvci5ydV1HYXJyeXNfTW9kX3YxMy4wNy4wNS50b3JyZW50XHUwMDAwIiwibmFtZSI6IkdhcmlzLW1vZC0yIiwidHlwZSI6InRvcnJlbnQiLCJzaXplIjoiOTI4MDAiLCJybmQwIjoxODEyNjMzOTcyMTQ5M30 (garis_mod_2.exe)

1 / 68 (Malware)

http://ojv0enbdgnltq50.vrnserver.ru/eyJ2ZXIiOiIxIiwic2lkIjoiNTE1MiIsInVybCI6Imh0dHA6Ly9sZWV0b3IucnUvdG9ycmVudHMvW0xlZVRvci5ydV0udDM2MTU1NjQudG9ycmVudCIsIm5hbWUiOiJUb3JyZW50LXNoYXphbS0xIiwidHlwZSI6InRvcnJlbnQiLCJzaXplIjoiOTI4MDAiLCJybmQwIjo3MDgxMDEzNDQ3NjA1MH0 (torrent_shazam_1.exe)

13 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/aGJveG1lc3V6ZG9qdW5wdHlranVra3ZqbXN2a3J4cHsic2lkIjoiMjAzMCIsInVybCI6Imh0dHA6XC9cL3MxLmZpbGUtc3BhY2Uub3JnXC9kb3duXC9Pbmc1NkhNZ0xmXC8xNDI1MTUxOTIzXC93TmdMOURiRU5qUTRaeVBTZVBpdGN3XC8xXC8wXC8xXC9BVl9Wb2ljZV9DaGFuZ2VyX1NvZnR3YXJlX0RpYW1vbmRfdjcuMC41NC56aXAiLCJuYW1lIjoiQVZfVm9pY2VfQ2hhbmdlcl9Tb2Z0d2FyZV9EaWFtb25kX3Y3LjAuNTQuemlwIiwidHlwZSI6InppcCIsInNpemUiOiIxODMxNjQ3NyIsInZlciI6IjEiLCJybmQwIjoiOGQ5NWM5M2M2MjBlNjA5Mzk2ZWFiMTNjMWUwNjM2MjEifQ,, (av_voice_changer_software_diamond_v7.0.54.exe)

16 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/bmxxZXV0ZmZkdXZjanV3dG9scm9jaWN2Y3VodnV1a3lua3sidmVyIjoiMSIsInNpZCI6IjU0NzIiLCJ1cmwiOiJodHRwOlwvXC9jbGlja2Zvcm0ucnVcL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMTNcLzExXC9kb2dvdm9yLXBvZHJ5YWQtc2ltcGxlLTEuZG9jIiwibmFtZSI6ImRvZ292b3ItcG9kcnlhZC1zaW1wbGUtMS5kb2MiLCJ0eXBlIjoiYm9vayIsInNpemUiOjAsInJuZDAiOiI1YzNlYzQ3ODk5N2FjNjUxYzQ4N2ZmMzk0MTEwM2U0ZiJ9 (dogovor_podryad_simple_1.exe)

16 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/dnhsb3dodGtjeWN0Ym1keyJ2ZXIiOiIxIiwic2lkIjoiNTQ3MiIsInVybCI6Imh0dHA6XC9cL2NsaWNrZm9ybS5ydVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAxM1wvMTFcL2RvZ292b3ItcG9kcnlhZC1zdHJveS5kb2MiLCJuYW1lIjoiZG9nb3Zvci1wb2RyeWFkLXN0cm95LmRvYyIsInR5cGUiOiJib29rIiwic2l6ZSI6MCwicm5kMCI6IjU0NTcxMmZjOGJlOThiMjZkNGU2ZTMwMjY3MTU3MzdhIn0, (dogovor_podryad_stroy.exe)

9 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/ZWJoaHZtdGFvbXlienVyc3ZmcHdhdWd7InNpZCI6IjE5ODciLCJ1cmwiOiJodHRwOlwvXC94bi0tODBhY21tY2pkamthZ2E3ZS54bi0tcDFhaVwvZG93bmxvYWRcL3JlZGlyZWN0XC8zMmIzNDQyMzM1ZjdlZTE0MDU5YWNiZmZkMTU2ODEzYVwvdXVuZzJ6ZnZ0OHdoXC8iLCJuYW1lIjoiMTU1IFNUQUtLRVIuN3oiLCJ0eXBlIjoiIiwic2l6ZSI6IjcyMTM2MTc3IiwidmVyIjoiMSIsInJuZDAiOiI1MjI5NTY4NTE4MDI1NzRkNzQ0NjA1YmI5OWVkM2VhMCIsInN1Yl9pZCI6IjcyIn0, (155 stakker.exe)

1 / 68 (Adware)

http://ojv0enbdgnltq50.vrnserver.ru/a3NzeXdnemRleHpnYWl7InNpZCI6IjU1MjEiLCJ1cmwiOiJodHRwczpcL1wveGFrZXJzLm9yZ1wvZmlsZXNcL3NldHVwLnppcCIsIm5hbWUiOiJXaS1GaS1QaXJhdGUtVG9ydHVnYS5leGUiLCJ0eXBlIjoic2V0dXAiLCJzaXplIjo3MDAwLCJ2ZXIiOiIxIiwicm5kMCI6ImM2ZGJhY2NiNmIzN2Y1NWE4ODNhZGJjOTVmMjE1ZmJlIn0 (wi_fi_pirate_tortuga.exe)

URL:

http://ojv0enbdgnltq50.vrnserver.ru/

Google Analytics:

UA-55552418

Title:

“Истёк срок регистрации доменаvrnserver.ru”

Web server:

nginx

Related Domains

avast-skachatbesplatno.ru

30 of 151 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.