home

downloader-default11h.disk.yandex.ru

YANDEX, LLC.

Domain Information

The domain downloader-default11h.disk.yandex.ru registered by YANDEX, LLC. was initially registered in September of 1997 through RU-CENTER-RU. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Tuesday, September 23, 1997

Expires date:
Wednesday, October 1, 2014

ASN:
AS13238 YANDEX Yandex LLC

Root domain:
yandex.ru

Whois:
1 yandex.ru record

The domain downloader-default11h.disk.yandex.ru has been seen to resolve to the following IP address.

84.201.190.114
downloader-default11h.disk.yandex.ru
September 4, 2014

File downloads found at URLs served by downloader-default11h.disk.yandex.ru.

1 / 68
https://downloader-default11h.disk.yandex.ru/rdisk/9fdfd056aa88af673dfae45be7865b68/53be681b/.../x-msdownload&fsize=3298373&hid=421496046dda09fda4cb8ebd41fa4a7a&media_type=executable&rtoken=2b75477f8fa764abf917639d760417e8&rtimestamp=53be681c&force_default=yes  (44fc54fc50291c4de7b8ae446ac69c6b)

0 / 68
https://downloader-default11h.disk.yandex.ru/rshare/a35c77aa44b11f57b0fc4a275b32314c/5337f0ee/.../x-msdownload&fsize=999544&hid=9459967aaef71715a0e5358bd8626ef4&media_type=executable&rtoken=7f7933e3e5ec77f0023e273bc785ce64&rtimestamp=5337f0f1  (f27299a2114f77e9dfe2afc9aaa581ad)

The following file have been seen to comunicate with downloader-default11h.disk.yandex.ru in live environments.

TCP » 84.201.190.114:443
YandexDisk.exe

URL:
http://downloader-default11h.disk.yandex.ru/

Title:
“Сервис временно недоступен”

SSL certificate subject:
E=disk-admin@yandex-team.ru, CN=*.disk.yandex.ru, S=Russia, L=Moscow, OU=ITO, O=Yandex, C=RU

SSL certificate issuer:
CN=Certum Level IV CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Web server:
nginx

yandex.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.