home

xn----8sbfnk1brdkt.xn--p1ai

Domain Information

Server location:
Pavlodar, Kazakstan (KZ)

ASN:
AS9198 KAZTELECOM-AS JSC Kazakhtelecom,KZ

Scanner detections:
Detections  (62% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MediaGet.Banner.Installer (M), PUP.MediaGet.Inbox.Installer (M), PUP.Bundlore (M)
100.00%

Kaspersky
not-a-virus:HEUR:Downloader.Win32.MediaGet
37.50%

Sophos
MediaGet (PUA), PUA 'MediaGet' (of type Hacktool)
37.50%

Dr.Web
Program.MediaGet.133, riskware program Program.MediaGet.142
37.50%

Bkav FE
W32.HfsAdware
25.00%

Malwarebytes
PUP.Optional.MediaGet
25.00%

ESET NOD32
Win32/MediaGet.AE potentially unwanted (variant)
25.00%

Comodo Security
Application.Win32.MediaGet.G
25.00%

G Data
Win32.Adware.MediaGet
25.00%

AVG
Banne
25.00%

K7 AntiVirus
Unwanted-Program
12.50%

IKARUS anti.virus
PUA.MediaGet
12.50%

Baidu Antivirus
Adware.Win32.MediaGet
12.50%

Qihoo 360 Security
Win32/Virus.e7d
12.50%

ESET NOD32
Win32/MediaGet.AE potentially unwanted application
12.50%

The domain xn----8sbfnk1brdkt.xn--p1ai has been seen to resolve to the following IP address.

82.200.204.157
mail.ekzo.org
September 10, 2015

File downloads found at URLs served by xn----8sbfnk1brdkt.xn--p1ai.

1 / 68      (Adware)
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL2RsMi5la3pvLm9yZy9lR0owYW5ocGNIRmllbkY3SW5abGNpSTZJakVpTENKemFXUWlPaUkxTmpVeElpd2lkWEpzSWpvaWFIUjBjRHBjTDF3dlpHd3VaV3Q2Ynk1dmNtZGNMMnRsZVdkbGJpNTNhVzV5WVhJdWNtRnlJaXdpYm1GdFpTSTZJbXRsZVdkbGJpNTNhVzV5WVhJdWNtRnlJaXdpZEhsd1pTSTZJbUZ5WTJocGRtVWlMQ0p6YVhwbElqb3lNak15TXpKOQ==  (keygen.winrar.exe)

0 / 68
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL3JhcmxhYi5jb20vcmFyL3dyYXI1MzBydS5leGU=  (wrar530ru.exe)

0 / 68
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL3Byb2R1Y3RzLmthc3BlcnNreS1sYWJzLmNvbS9ydXNzaWFuL2hvbWV1c2VyL2tpczIwMTYva2lzMTYuMC4wLjYxNHJ1LWt6LmV4ZQ==  (kis16.0.0.614ru-kz.exe)

1 / 68      (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/engine/xgo.php?url=http://.../hTjmKh  (mediaget_id2529599ids2s.exe)

0 / 68
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL3JhcmxhYi5jb20vcmFyL3dyYXI1MjFydS5leGU=  (wrar521ru.exe)

5 / 68      (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/engine/xgo.php?url=http://.../hTjmKh  (age-of-empires_id3809258ids1s.exe)

1 / 68      (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/engine/xgo.php?url=http://.../hTjmKh  (outlast-full-turkce-indir_id2959289ids2s.exe)

0 / 68
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL2Rvd25sb2FkLmFkZ3VhcmQucnUvZC84ODIvYWRndWFyZEluc3RhbGxlci5leGU=  (adguardinstaller.exe)

1 / 68      (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/engine/xgo.php?url=http://.../hTjmKh  (mediaget_id3993269ids1s.exe)

1 / 68      (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/engine/xgo.php?url=http://.../hTjmKh  (collapse-dilogiya-rus-repack-ot-rg-mehanikitorrent_id1198379ids1s.exe)

11 / 68    (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL2dvby5nbC9oVGptS2g=  (simpletv-2023-full-download-indir_id4578310ids2s.exe)

13 / 68    (PUP)
http://xn----8sbfnk1brdkt.xn--p1ai/engine/xgo.php?url=http://.../hTjmKh  (mediaget_id2772891ids2s.exe)

0 / 68
http://xn----8sbfnk1brdkt.xn--p1ai/.../go.php?url=aHR0cDovL3JhcmxhYi5jb20vcmFyL3dpbnJhci14NjQtNTIxcnUuZXhl  (winrar-x64-521ru.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.