thewarboys.mobie.in

Povilas Musteikis

Domain Information

The domain thewarboys.mobie.in registered by Povilas Musteikis was initially registered in July of 2009 through GoDaddy.com, LLC (R101-AFIN). Currently this domain has been known to host various forms of malware. The hosted servers are located in Rotterdam, Zuid-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
GoDaddy.com, LLC (R101-AFIN)

Server location:
Zuid-Holland, Netherlands (NL)

Create date:
Friday, July 3, 2009

Expires date:
Monday, July 3, 2017

Updated date:
Friday, July 1, 2016

ASN:
AS57172 GLOBALLAYER Global Layer B.V.,NL

Root domain:

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan Horse
100.00%

Quick Heal
Trojan.Agent.ng
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.12363D6E!305544558
100.00%

Panda Antivirus
Trj/CI.A
100.00%

Reason Heuristics
Unnamed.Threat.11
100.00%

The domain thewarboys.mobie.in has been seen to resolve to the following 2 IP addresses.

xtgem.com
July 25, 2016

xtgem.com
July 25, 2016

File downloads found at URLs served by thewarboys.mobie.in.

5 / 68      (Malware)
http://thewarboys.mobie.in/.../ReConnect.exe  (bd561c865f6f1e74701a94387aab6779)

The following 10 files have been seen to comunicate with thewarboys.mobie.in in live environments.

URL:
http://thewarboys.mobie.in/

Title:
“tHe WARbOYs”