home

vega.dru4.ru

Private Person  (Proxy Registrant)

Domain Information

The domain vega.dru4.ru is registered by proxy through DOMENUS-RU and was originally registered in February of 2014. The hosted servers are located in Pavlovskaya, Krasnodar within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
DOMENUS-RU

Server location:
Krasnodar, Russia (RU)

Create date:
Thursday, February 6, 2014

Expires date:
Monday, February 6, 2017

ASN:
AS31240 OLD-HT-SYSTEMS-AS JSC Hosting Telesystems autonomous system,RU

Root domain:
dru4.ru

Whois:
1 dru4.ru record

The domain vega.dru4.ru has been seen to resolve to the following IP address.

78.110.50.124
cl9-w.ht-systems.ru
September 15, 2016

File downloads found at URLs served by vega.dru4.ru.

0 / 68
http://vega.dru4.ru/vega.zip  (2e9f3fdbce423dd9d634e65351695b23)

The following 2 files have been seen to comunicate with vega.dru4.ru in live environments.

TCP » 78.110.50.124:80
online-guardian-v2.0.9.exe

TCP » 78.110.50.124:80
7eda.tmp.exe

URL:
http://vega.dru4.ru/

Google Analytics:
UA-80495734

Title:
“Vega conflict autofarm cheat autobot”

Web server:
Apache/2.2.15 (Red Hat) mod_rpaf/0.6 PHP/5.4.30 (PHP/5.4.30)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.