kml.extensionfile.net

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain kml.extensionfile.net is registered by proxy through ENOM, INC. and was originally registered in March of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Francisco, California within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrar:
ENOM, INC.

Server location:
California, United States (US)

Create date:
Thursday, March 27, 2008

Expires date:
Sunday, March 27, 2016

Updated date:
Thursday, March 5, 2015

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

XVirus List
Win.Detected
100.00%

Reason Heuristics
PUP.ParetoLogic.Optional (L)
100.00%

The domain kml.extensionfile.net has been seen to resolve to the following 2 IP addresses.

May 5, 2015

May 5, 2015

File downloads found at URLs served by kml.extensionfile.net.

2 / 68      (PUP)

URL:
http://kml.extensionfile.net/

Title:
“Open File Extension KML”

SSL certificate subject:
CN=ssl2880.cloudflare.com, O="CloudFlare, Inc.", L=San Francisco, S=CA, C=US

SSL certificate issuer:
CN=GlobalSign Organization Validation CA - G2, O=GlobalSign nv-sa, C=BE