pwl03izcddzcew1.insanesoft.ru
Private Person (Proxy Registrant)
Domain Information
The domain pwl03izcddzcew1.insanesoft.ru is registered by proxy through REGRU-RU and was originally registered in April of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrant:
Private Person
Server location:
Noord-Holland, Netherlands (NL)
Create date:
Wednesday, April 29, 2015
Expires date:
Friday, April 29, 2016
ASN:
AS59711 FORTUNIX-AS Fortunix Networks L.P.,GB
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
herdProtect (fuzzy)
a variant of 56340f9ebf95f914414f868a68a75d15d759d290, a variant of 4e0bf812dcc13e148de847aa002f366bb72e8a8c
66.67%
VIPRE Antivirus
Amonetize, Threat.4785227
66.67%
K7 AntiVirus
Unwanted-Program
66.67%
Agnitum Outpost
Riskware.Agent, Trojan.InstallMonster
66.67%
Dr.Web
Trojan.InstallMonster.1230
66.67%
Avira AntiVirus
ADWARE/Lollipop.jewc
66.67%
AVG
NaviPromo.F, Adware NaviPromo.X
66.67%
Malwarebytes
PUP.Optional.InstallMonster
66.67%
Reason Heuristics
Threat.Win.Reputation.IMP, PUP.OutBrowse.ERSHNET (M)
66.67%
ESET NOD32
Win32/InstallMonstr.KP potentially unwanted (variant)
33.33%
ESET NOD32
Win32/InstallMonstr.KP potentially unwanted application
33.33%
Bkav FE
W32.HfsAdware
33.33%
Zillya! Antivirus
Adware.InstallMonster.Win32.164
33.33%
The domain pwl03izcddzcew1.insanesoft.ru has been seen to resolve to the following IP address.
File downloads found at URLs served by pwl03izcddzcew1.insanesoft.ru.
URL:
http://pwl03izcddzcew1.insanesoft.ru/
Web server:
nginx/1.4.2 (PHP/5.4.17)
Related Domains
