home

wf.mail.ru

MGL Mail.ru Internet Assets Limited

Domain Information

The domain wf.mail.ru registered by MGL Mail.ru Internet Assets Limited was initially registered in September of 1997 through RU-CENTER-RU. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Saturday, September 27, 1997

Expires date:
Saturday, October 1, 2016

ASN:
AS21051 NIVAL-AS Limited liability company Mail.Ru,RU

Root domain:
mail.ru

Whois:
1 mail.ru record

The domain wf.mail.ru has been seen to resolve to the following 2 IP addresses.

195.211.131.162
February 23, 2016

195.211.131.161
vl542.c01.astrum-nival.com
February 23, 2016

File downloads found at URLs served by wf.mail.ru.

0 / 68
https://.../dynamic/.../gc_load.php  (warfaceloader_db26a4d9a006217f39f2d23922d3eabd.exe)

5 / 68      (Malware)
https://.../dynamic/.../gc_load.php  (warfaceloader_f09d755af1be583538ecff8be02eb313.exe)

0 / 68
https://.../dynamic/.../gc_load.php  (warfaceloader_d4efecd3e361ae193bda39846661d9dd.exe)

0 / 68
https://.../dynamic/.../gc_load.php  (warfaceloader_2f54ccce54bffbbfa5ddc1bc9f49bdc0.exe)

The following 17 files have been seen to comunicate with wf.mail.ru in live environments.

TCP » 195.211.131.161:443
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 195.211.131.161:443
amigo.exe (Amigo by Mail.Ru)

TCP » 195.211.131.161:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 195.211.131.161:443
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 195.211.131.161:443
UCBrowser.exe (by UCWeb)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online EU EN by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online EU FR by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:443
UCBrowser.exe (by UCWeb)

TCP » 195.211.131.161:443
UCBrowser.exe (by UCWeb)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online RU by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online EU FR by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online RU by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:80
Launcher.exe (Allods Online RU by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online EU FR by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:443
Launcher.exe (Allods Online EU EN by © 2008-2015 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:80
Launcher.exe (Allods Online US by © 2011 Allods Team, Mail.Ru Games)

TCP » 195.211.131.161:80
Launcher.exe (Allods Online EU EN by © 2008 - 2009 Astrum Nival)

URL:
http://wf.mail.ru/

Google Analytics:
UA-3127420

Title:
“Warface | Многопользовательский онлайн-шутер нового поколения от создателей Far Cry и Crysis”

Description:
“Многопользовательский онлайн-шутер нового поколения от создателей Far Cry и Crysis”

SSL certificate subject:
CN=operator.mail.ru, OU=IT, O=LLC Mail.Ru, L=Moscow, S=RUSSIAN FEDERATION, C=RU

SSL certificate issuer:
CN=GeoTrust SSL CA - G3, O=GeoTrust Inc., C=US

Web server:
nginx

Facebook:
Likes:  139
Shares:  1,893
Comments:  89

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.