home

www.refnull.com

JMHCORP

Domain Information

The domain www.refnull.com registered by JMHCORP was initially registered in June of 2012 through ENOM, INC.. Currently this domain has been known to host various forms of malware. The hosted servers are located in Kansas City, Missouri within the United States which resides on the DNSSLAVE.COM network.
Registrar:
ENOM, INC.

Server location:
Missouri, United States (US)

Create date:
Tuesday, June 26, 2012

Expires date:
Friday, June 26, 2015

Updated date:
Thursday, June 26, 2014

ASN:
AS32875 VIRPUS - DNSSLAVE.COM,US

Root domain:
refnull.com

Whois:
2 refnull.com records

Scanner detections:
Malware distribution  (67% detected)

Scan engine
Details
Detections

McAfee
Artemis!DE0C96F86C3B, Artemis!1D24317FE7B1
100.00%

avast!
Win32:Agent-ARQG [Trj], MSIL:Downloader-KZ [Trj]
100.00%

Avira AntiVirus
TR/Dropper.Gen, TR/Rogue.9638025
100.00%

G Data
Win32.Trojan.Agent.GR7AXQ, Trojan.Generic.9638025
100.00%

Bkav FE
W32.Clod8ca.Trojan
50.00%

F-Prot
W32/Downloader-Web-based!Maximu
50.00%

Trend Micro House Call
TROJ_GEN.F47V1108
50.00%

Dr.Web
DLOADER.Trojan
50.00%

Panda Antivirus
Trj/Agent.JJW
50.00%

MicroWorld eScan
Trojan.Generic.9638025
50.00%

nProtect
Trojan-Dropper/W32.Dapato.9492992
50.00%

Agnitum Outpost
Trojan.DR.Dapato
50.00%

Norman
Suspicious_Gen2.VSJEZ
50.00%

Kaspersky
Trojan-Dropper.Win32.Dapato
50.00%

Bitdefender
Trojan.Generic.9638025
50.00%

The domain www.refnull.com has been seen to resolve to the following 2 IP addresses.

98.124.243.45
July 6, 2016

173.0.60.57
September 5, 2014

File downloads found at URLs served by www.refnull.com.

24 / 68    (Malware)
http://www.refnull.com/to/?http://master.dl.sourceforge.net/project/.../musica.exe&attempt=1&attempt=2  (1d24317fe7b191f40a14013047f51cd0)

0 / 68
http://www.refnull.com/to/?http://master.dl.sourceforge.net/project/.../Notificador de Estrenos - (yaske.net).exe&attempt=1&attempt=2&attempt=3  (75fa78406dcf7f3c34423b106a0f3093)

9 / 68      (Malware)
http://www.refnull.com/to/?http://master.dl.sourceforge.net/project/.../Notificador de Estrenos (yaske.net).exe&attempt=1&attempt=2  (de0c96f86c3b9ba309792dd34c458518)

Twitter:
Shares:  5

Quantcast US:
Rank:  432,425

Statistics are for the previous month.

doivndj.com

downloadscenter.com

fastjavinstall.com

pepakurapros.com

shpandwn.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.