home

sf-download.com

Domain Privacy Service FBO Registrant.  (Proxy Registrant)

Domain Information

The domain sf-download.com is registered by proxy through DOMAIN.COM, LLC and was originally registered in December of 2015. The hosted servers are located in Berlin, Berlin within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
DOMAIN.COM, LLC

Server location:
Berlin, Germany (DE)

Create date:
Thursday, December 17, 2015

Expires date:
Sunday, December 17, 2017

Updated date:
Thursday, December 17, 2015

ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE

Whois:
1 sf-download.com record

The domain sf-download.com has been seen to resolve to the following IP address.

136.243.42.155
static.155.42.243.136.clients.your-server.de
February 13, 2016

The following 78 files have been seen to comunicate with sf-download.com in live environments.

TCP » 136.243.42.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.42.155:80
ws1a6e0da0.dat

TCP » 136.243.42.155:80
browser.exe (Yandex by YANDEX)

TCP » 136.243.42.155:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.42.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.42.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.42.155:80
ffgogogo.exe (ffgogogo by Mozilla)

TCP » 136.243.42.155:80
savefromnethelper-web-642b5b26e4-.exe

TCP » 136.243.42.155:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 136.243.42.155:80
browser.exe (Yandex by YANDEX)

TCP » 136.243.42.155:80
savefromnethelper-web-6e428ee390.exe (by SaveFrom.net)

TCP » 136.243.42.155:80
AdxEngine.exe (MPC AdCleaner by DotC United Inc)

TCP » 136.243.42.155:80
savefromnethelper-web-56bb1ba70f-307.exe (by SaveFrom.net)

TCP » 136.243.42.155:80
savefromnethelper-web-ef178ea141.exe

TCP » 136.243.42.155:80
savefromnethelper-web-a7de26c634-307.exe (by SaveFrom.net)

TCP » 136.243.42.155:80
savefromnethelper-web-loader.exe (by SaveFrom.net)

TCP » 136.243.42.155:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.42.155:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 136.243.42.155:80
savefromnethelper-web-8097c47386.exe

TCP » 136.243.42.155:443
e049a77f2fc23085cb95666a71d8f260.exe

 
Latest 20 of 119 files

February 13, 2016
helper.sf-download.com

URL:
http://sf-download.com/

Web server:
nginx (PHP/5.4.45)

sf-addon.com

sf-helper.com

sf-helper.net

ummyconverter.com

ummydownloader.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.