home

dl.youfile.org

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain dl.youfile.org is registered by proxy through PDR Ltd. d/b/a PublicDomainRegistry.com. Currently this domain has been known to host various forms of malware. The hosted servers are located in Saint Petersburg, Saint Petersburg City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com

Server location:
Saint Petersburg City, Russia (RU)

Root domain:
youfile.org

Whois:
1 youfile.org record

Scanner detections:
Malware distribution  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ArturAra.Installer (M), PUP (M)
100.00%

The domain dl.youfile.org has been seen to resolve to the following IP address.

37.139.47.25
webcluster.clodo.ru
April 3, 2016

File downloads found at URLs served by dl.youfile.org.

1 / 68      (Malware)
https://dl.youfile.org/c77p  (ashampoo burning studio 8.04.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/bkc5  (off timer 2.5.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/7kpg  (spin tires.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/9ss2  (pinnacle studio 17 ultimate 17.2.0.246.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/7yje  (âÿæåì äëÿ äåòåé. ñïèöû. ¹1-2010.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/94ov  (nvidia 3dtv play 2.11 15 x86-x64.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/a20n  (более 1000 игр для sega mega drive2, sega 32x эмуляторы.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/.../MTAwMztodHRwJTNBJTJGJTJGd3d3Lndlc3RmaWxlcy5jb20lMkZmaWxlcyUyRjI4MTA0ZERvY3VtZW50MlBERi1QaWxvdC0yLTE2LTEwOC1pbmNsLVBhdGNoLVJFUFQtcmFyO25hbWU9RG9jdW1lbnQyUERGK1BpbG90KzIuMTYuMTA4LnppcDtzaXplPTE1MDAwO3R5cGU9emlw  (document2pdf pilot 2.16.108.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/be2i  (feder - lordly.mp3.exe)

1 / 68      (Malware)
https://dl.youfile.org/bg7a  (crash tag team racing.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/ba4z  (эмулятор-игры для денди.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/aimx  (microsoft flight simulator x gold edition(лицензия).torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/avtk  (ultra video converter 5.1.0101 rus.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/5dM4MA  (zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/a9sb  (softmaker office 2016 rev. 733.0527 repack by kpojiuk.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/a55f  (eminem - live in barcelona.torrent.exe)

1 / 68      (PUP)
https://dl.youfile.org/8bgw  (wondershare time freeze 2.0.3 rus.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/87Jw2M  (solidworks 2016.zip.exe)

1 / 68      (PUP)
https://dl.youfile.org/5atLqC  (croatia squad, frey - white horse (nytron, m0b & gustavo peluzo remix).mp3.exe)

1 / 68      (PUP)
https://dl.youfile.org/.../MTAwMztodHRwJTNBJTJGJTJGZGVwb3NpdGZpbGVzLmNvbSUyRmZpbGVzJTJGMjZpZnhrdWIzO25hbWU9JUQxJUVFJUVBJUYwJUUwJUYyLjUuMC4xKyUyOCVGMSslRUYlRUUlRTQlRTQlRTUlRjAlRTYlRUElRUUlRTkrd2luZG93cys3JTI5KyUyRitTb2NyYXQuNS4wLjErJTI4d2luZG93cys3LXNldmVuK3N1cHBvcnQlMjkrcG9ydGFibGUuemlwO3NpemU9MTUwMDA7dHlwZT16aXA=  (сократ.5.0.1 (с поддержкой windows 7) - socrat.5.0.1 (windows 7-seven support) portable.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/4v8f  (borland c builder 6.0.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/8bje  (xxx online tv player.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/a3bd  (tipard total media converter v 6.1.16 eng portable.zip.exe)

1 / 68      (Malware)
https://dl.youfile.org/a3bg  (aiseesoft total video converter v3.3.16 portable.zip.exe)

0 / 68
https://dl.youfile.org/.../MTAwMztodHRwJTNBJTJGJTJGcmFwaWRzaGFyZS5jb20lMkZmaWxlcyUyRjY5MTg3ODkwJTJGS2FrLnpoaXZldGUua2FyYXNpLjE5OTIuRFZEUmlwLnBhcnQwMS5yYXI7bmFtZT0uemlwO3NpemU9MTUwMDA7dHlwZT16aXA=  (zip.zip)

1 / 68      (Malware)
https://dl.youfile.org/9m03  (willy william - ego.mp3.exe)

1 / 68      (Malware)
https://dl.youfile.org/6tnh  (ïàòðîíåñ.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/6b2e  (borland c builder 6.0.torrent.exe)

1 / 68      (Malware)
https://dl.youfile.org/4vb7  (borland c builder 6.0 enterprise edition sp4 bcc patch 6.0.torrent.exe)

1 / 68      (PUP)
https://dl.youfile.org/77yr  (надія гураль - село моє.mp3.exe)

 
Latest 30 of 129 download URLs

The following 2 files have been seen to comunicate with dl.youfile.org in live environments.

TCP » 37.139.47.25:80
сборник мультфильмов мойдодыр.torrent.exe

TCP » 37.139.47.25:80
zuma deluxe.torrent.exe

URL:
http://dl.youfile.org/

SSL certificate subject:
CN=youfile.org

SSL certificate issuer:
CN=StartCom Class 1 DV Server CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Web server:
nginx/1.6.2

file.pet

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.