home

obsifight.fr

OVH NET

Domain Information

The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH Systems

Whois:
2 obsifight.fr records

The domain obsifight.fr has been seen to resolve to the following 5 IP addresses.

104.27.191.161
March 30, 2016

104.27.190.161
March 30, 2016

104.25.129.23
February 2, 2016

104.25.128.23
February 2, 2016

213.186.33.87
cluster014.ovh.net
June 19, 2015

File downloads found at URLs served by obsifight.fr.

0 / 68
http://obsifight.fr/.../ObsiFight.exe  (4209cce93393e8832bb7cdd008a93bb4)

0 / 68
http://obsifight.fr/.../ObsiFight.exe  (6cb7cc7a559742a88456a4ff83c94647)

0 / 68
http://obsifight.fr/.../ObsiFight.exe  (6cb7cc7a559742a88456a4ff83c94647)

0 / 68
https://obsifight.fr/.../ObsiFight.exe  (4209cce93393e8832bb7cdd008a93bb4)

0 / 68
http://obsifight.fr/.../ObsiFight.exe  (d69d2802ec2f3490cf49f97808914b56)

0 / 68
https://obsifight.fr/.../ObsiFight.exe  (6cb7cc7a559742a88456a4ff83c94647)

0 / 68
http://obsifight.fr/.../ObsiFight.exe  (8650e95a2d3b2234fcc27bffb8af535c)

1 / 68
http://obsifight.fr/.../ObsiFight.exe  (73eeb31fa0bc5ab16d30c926b54da640)

The following 13 files have been seen to comunicate with obsifight.fr in live environments.

TCP » 213.186.33.87:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.87:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 213.186.33.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
jingling.exe

TCP » 213.186.33.87:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.87:80
onlineguardian-v2.exe

TCP » 213.186.33.87:25
www.exe

TCP » 213.186.33.87:80
Havij.exe (Havij by ITSecTeam)

TCP » 213.186.33.87:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 213.186.33.87:80
Milouz Market.exe (Market by Milouz Corp)

TCP » 213.186.33.87:80
Milouz Market.exe (Market by Milouz Corp)

TCP » 213.186.33.87:587
w.exe

February 10, 2016
www.obsifight.fr

URL:
http://obsifight.fr/

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.