home

puzohilu74663liziw.kisofrewucoyi.info

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.,ES

Root domain:
kisofrewucoyi.info

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.Vittalia.34
100.00%

VIPRE Antivirus
Threat.4783369
100.00%

ESET NOD32
Win32/TrojanDropper.Addrop.C trojan
100.00%

Malwarebytes
PUP.Optional.InstallCore.SID.A
100.00%

AVG
Onenet
100.00%

Reason Heuristics
PUP.Installer.OnekitInternet
100.00%

herdProtect (fuzzy)
a variant of 045495422c991cd61c0276f72adc9e03278f5d92
100.00%

The domain puzohilu74663liziw.kisofrewucoyi.info has been seen to resolve to the following 2 IP addresses.

93.189.36.168
rack24u4.hispaweb.net
May 15, 2015

93.189.35.249
May 15, 2015

File downloads found at URLs served by puzohilu74663liziw.kisofrewucoyi.info.

7 / 68      (Adware)
http://puzohilu74663liziw.kisofrewucoyi.info/.../download?p=MATOMY&trckid=121791|20uPmd03gcmvSXRf44LgSg1yR5hw000.&affid=176681  (installer_adobe_flash_player_japanese.exe)

The following file have been seen to comunicate with puzohilu74663liziw.kisofrewucoyi.info in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.