noransom.kaspersky.com

Kaspersky Lab ZAO

Domain Information

The domain noransom.kaspersky.com registered by Kaspersky Lab ZAO was initially registered in October of 1997 through MARKMONITOR INC.. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
MARKMONITOR INC.

Server location:
Dublin City, Ireland (IE)

Create date:
Thursday, October 9, 1997

Expires date:
Friday, October 8, 2021

Updated date:
Wednesday, July 18, 2012

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

The domain noransom.kaspersky.com has been seen to resolve to the following IP address.

ec2-54-77-184-213.eu-west-1.compute.amazonaws.com
May 6, 2015

File downloads found at URLs served by noransom.kaspersky.com.

0 / 68
https://noransom.kaspersky.com/.../CoinVaultDecryptor.zip  (acc5d094e59759b515ba762e5bd28463)

0 / 68
https://noransom.kaspersky.com/.../CoinVaultDecryptor.zip  (3cda499af12eb23ff3a228f62c69272c)

URL:
http://noransom.kaspersky.com/

Google Analytics:
UA-61587331

Title:
“Ransomware decryptor | Kaspersky Lab”

Description:
“Are you a ransomware victim? This service enables you to find your individual decryption keys and eventually recover files that are being held hostage.”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=noransom.kaspersky.com, SERIALNUMBER=1027739867473, OID.2.5.4.15=Private Organization, L=Moscow, S=Moscow, C=RU, O=Kaspersky Lab ZAO, OID.1.3.6.1.4.1.311.60.2.1.3=RU

SSL certificate issuer:
CN=thawte EV SSL CA - G3, O="thawte, Inc.", C=US

Web server:
nginx