home

kersef.com

Asj Illk

Domain Information

The domain kersef.com registered by Asj Illk was initially registered in January of 2016 through OVH. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Sunday, January 31, 2016

Expires date:
Tuesday, January 31, 2017

Updated date:
Wednesday, April 6, 2016

ASN:
AS16276 OVH OVH SAS

Whois:
1 kersef.com record

The domain kersef.com has been seen to resolve to the following IP address.

213.186.33.24
cluster013.ovh.net
May 25, 2016

File downloads found at URLs served by kersef.com.

0 / 68
http://kersef.com/.../InstaladorAsgard.exe  (c952712680c74a53be510e2cc8e3c7ac)

The following 10 files have been seen to comunicate with kersef.com in live environments.

TCP » 213.186.33.24:80
play globalmu.exe (Launcher.Premium by RabanSoft)

TCP » 213.186.33.24:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.24:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.24:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.24:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.24:80
ssn.exe (ssn)

TCP » 213.186.33.24:80
jingling.exe

TCP » 213.186.33.24:80
onlineguardian-v2.exe

TCP » 213.186.33.24:25
www.exe

TCP » 213.186.33.24:80
play angelsmu.exe (Launcher.Premium by RabanSoft)

URL:
http://kersef.com/

Google Analytics:
UA-30646318

Title:
“Search”

SSL certificate subject:
CN=portaldon.com

SSL certificate issuer:
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

Web server:
Apache (PHP/5.4.45)

portaldon.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.