home

downloader-default13h.disk.yandex.ru

YANDEX, LLC.

Domain Information

The domain downloader-default13h.disk.yandex.ru registered by YANDEX, LLC. was initially registered in September of 1997 through RU-CENTER-RU. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
RU-CENTER-RU

Server location:
Moscow City, Russia (RU)

Create date:
Tuesday, September 23, 1997

Expires date:
Thursday, October 1, 2015

ASN:
AS13238 YANDEX Yandex LLC,RU

Root domain:
yandex.ru

Whois:
2 yandex.ru records

The domain downloader-default13h.disk.yandex.ru has been seen to resolve to the following IP address.

84.201.190.116
downloader-default13h.disk.yandex.ru
September 2, 2014

File downloads found at URLs served by downloader-default13h.disk.yandex.ru.

1 / 68
https://downloader-default13h.disk.yandex.ru/rdisk/22aa59fb86b828985b0658fc4e906d01/539c5d22/.../x-msdownload&fsize=84013932&hid=f30c091901ce430fe30a6859c6b6c1bf&media_type=executable&rtoken=661223602ecd5035b40d4a3374c2c395&rtimestamp=539c5d22&force_default=yes  (c8519b85d75a3197985e03dc1577246d)

5 / 68      (Malware)
https://downloader-default13h.disk.yandex.ru/rdisk/55114f2188218f99ed7f88137fc6b11d/52e6b4f0/xBPNoy9xAlY9UfuA6I1xh3u3q9chEgP256rmTDuV2YeYCgYdB_IfHOXuoyVY21otPpJ8MiofQnxj69bqulVgxw==?uid=0&filename=Minecraft Gift Code Generator 2013.exe&disposition=attachment&hash=AJALrS7XAhkcu6iN5bCvk7IiP9lE0yIvs8H40/lRw/.../x-msdownload&hid=56ab2c47a361641af97e2608e81e8126&rtoken=cddbecd686bef9e2d7f57c25e8a44e5c&rtimestamp=52e6b4f1  (d4db832337e2301a8e7b7c50c98bb679)

URL:
http://downloader-default13h.disk.yandex.ru/

Title:
“Сервис временно недоступен”

SSL certificate subject:
E=pki@yandex-team.ru, CN=*.disk.yandex.ru, S=Russian Federation, L=Moscow, OU=ITO, O=Yandex LLC, C=RU

SSL certificate issuer:
CN=Certum Level IV CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Web server:
nginx

yandex.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.