» sm.sftwr.ru
Overview
IPs Addresses (3)
Downloads (12)
Network (7)
Website Detail
Related Domains (17)

sm.sftwr.ru

Private Person (Proxy Registrant)

Domain Information

The domain sm.sftwr.ru is registered by proxy through R01-RU and was originally registered in August of 2015. The hosted servers are located in Gunzenhausen, Bayern within Germany which resides on the RIPE Network Coordination Centre network.

Registrant:

Private Person

Registrar:

R01-RU

Server location:

Bayern, Germany (DE)

Create date:

Wednesday, August 26, 2015

Expires date:

Friday, August 26, 2016

ASN:

AS24940 HETZNER-AS Hetzner Online AG,DE

Root domain:

sftwr.ru

Whois:

1 sftwr.ru record

The domain sm.sftwr.ru has been seen to resolve to the following 3 IP addresses.

85.10.200.21

85-10-200-21.clients.your-server.de

March 3, 2016

85.10.196.94

static.85-10-196-94.clients.your-server.de

March 3, 2016

178.63.40.158

static.158.40.63.178.clients.your-server.de

March 3, 2016

File downloads found at URLs served by sm.sftwr.ru.

1 / 68

http://sm.sftwr.ru/Nero_9.4.12.3_Free_Rus.exe (nero-9.4.12.3_free.exe)

1 / 68 (inconclusive)

http://sm.sftwr.ru/VLC_MediaPlayer_x32_Rus_Setup.exe (vlc-2.2.2-win32.exe)

0 / 68

http://sm.sftwr.ru/ICQ_Rus_Setup.exe (ICQ.exe)

0 / 68

http://sm.sftwr.ru/Adobe_Flash_Player_Internet_Explorer.exe (adobe_flash_player_(ie)_v20.0.0.286.exe)

0 / 68

http://sm.sftwr.ru/uTorrent_Rus_Setup.exe (uTorrent.exe)

0 / 68

http://sm.sftwr.ru/uTorrent_Rus_Setup.exe (uTorrent.exe)

0 / 68

http://sm.sftwr.ru/360TotalSecurity_Rus_Setup_sm.exe (360totalsecurity_rus_setup.exe)

0 / 68

http://sm.sftwr.ru/Skype_Rus_Full_Setup.exe (skype.exe)

0 / 68

http://sm.sftwr.ru/360TotalSecurity_Rus_Setup_sm.exe (nshabfb.tmp.exe)

0 / 68

http://sm.sftwr.ru/K-Lite_Codec_Pack_Basic.exe (k-lite_codec_pack_1190_basic.exe)

0 / 68

http://sm.sftwr.ru/Adobe_Flash_Player_Internet_Explorer.exe (9390d595-10eb-43bf-9459-dff45b3caa74)

0 / 68

http://sm.sftwr.ru/Adobe_Flash_Player_Internet_Explorer.exe (install_flash_player_ax.exe)

The following 7 files have been seen to comunicate with sm.sftwr.ru in live environments.

TCP » 85.10.196.94:80

SoftobaseUpdater_2.0.exe (Softobase Updater)

TCP » 178.63.40.158:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 85.10.196.94:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 85.10.196.94:80

installpack.exe

TCP » 85.10.200.21:80

directx_9.10.11.exe

TCP » 85.10.200.21:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 178.63.40.158:80

installpack.exe

TCP » 178.63.40.158:80

installpack.exe

TCP » 85.10.196.94:80

installpack.exe

TCP » 85.10.196.94:80

installpack.exe

TCP » 85.10.200.21:80

SoftobaseClient.exe (SoftobaseClient by Microsoft)

URL:

http://sm.sftwr.ru/

Web server:

nginx/1.8.0

Related Domains

besplatnyeprogrammy.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.