home

kssrv-dm99.std-p1-wrld.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain kssrv-dm99.std-p1-wrld.com is registered by proxy through ENOM, INC. and was originally registered in February of 2016. The hosted servers are located in Radviliskis, Siauliu Apskritis within Lithuania which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
Siauliu Apskritis, Lithuania (LT)

Create date:
Monday, February 29, 2016

Expires date:
Tuesday, February 28, 2017

Updated date:
Monday, February 29, 2016

ASN:
AS30721 SATGATE SatGate LLC

Root domain:
std-p1-wrld.com

Whois:
1 std-p1-wrld.com record

The domain kssrv-dm99.std-p1-wrld.com has been seen to resolve to the following IP address.

82.198.29.147
82.198.29.147.filestream.me
July 13, 2016

File downloads found at URLs served by kssrv-dm99.std-p1-wrld.com.

0 / 68
https://kssrv-dm99.std-p1-wrld.com/.../570a9486a3f64d7b975add50?st=UoHS6CPLw6-D-qdDADaPvg==&e=1460397607&u=y2P76U6XD3Dh0JXwYtOc7DE=  (sample.mkv)

The following file have been seen to comunicate with kssrv-dm99.std-p1-wrld.com in live environments.

TCP » 82.198.29.147:443
ida.exe (Internet Download Accelerator by WestByte)

URL:
http://kssrv-dm99.std-p1-wrld.com/

Title:
“Welcome to nginx!”

SSL certificate subject:
CN=kssrv-dm99.std-p1-wrld.com

SSL certificate issuer:
CN=RapidSSL SHA256 CA, O=GeoTrust Inc., C=US

Web server:
nginx

filestream.me

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.