www2.tusfiles.net

Artur Kozak  (via a Proxy Registrant)

Domain Information

TusFiles is a file hosting service that bills itself as a cloud backup platform, however the service is known to distributed various potentially unwanted software packages such as adware bundles through its wrapped download manager (signed by Artur Kozak, etc.). The domain www2.tusfiles.net is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2010. This domain has been seen distributing various forms of adware (some being very aggressive) directly or via bundled installations. The hosted servers are located in Frankfurt Am Main, Hessen within Germany which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Artur Kozak who is located in Kyiv, Ukraine.
Registrar:
GODADDY.COM, LLC

Server location:
Hessen, Germany (DE)

Create date:
Monday, May 17, 2010

Expires date:
Wednesday, May 17, 2017

Updated date:
Monday, May 18, 2015

ASN:
AS28753 LEASEWEB-DE Leaseweb Deutschland GmbH,DE

Root domain:

Scanner detections:
Adware distribution

Scan engine
Details
Detections

ESET NOD32
Win32/InstallMonetizer.AF potentially unwanted
100.00%

Baidu Antivirus
PUA.Win32.InstallMonetizer
100.00%

Reason Heuristics
PUP.InstallMonetizer.Bundle (M)
100.00%

The domain www2.tusfiles.net has been seen to resolve to the following IP address.

February 11, 2016

File downloads found at URLs served by www2.tusfiles.net.

0 / 68
https://www2.tusfiles.net/d/.../School_Grl.3gp  (63715e4e-ef7c-3734-d141-76dd5ae9c2f5_1d1e3d314e27af1)

0 / 68
https://www2.tusfiles.net/d/.../Antara murid & guru(www999.xtgem.com).3gp  (00e9b17e-5729-f1b5-0507-19a6b3f4de57_1d1e48bcb17ab5e)

0 / 68
https://www2.tusfiles.net/d/.../Msh Pake Baju lgsg di entot(www999.s3xtgem.com).3gp  (1962a139-a957-4daa-c708-cf0e947322f2_1d1e48c66ffece7)

0 / 68
https://www2.tusfiles.net/d/.../Mesum jilbab cantik(www999.s3xtgem.com).3gp  (71748f16-a2e6-691a-7096-8c3cc359c085_1d1e48d44171456)

0 / 68
https://www2.tusfiles.net/d/.../adik ipar masih sma.3gp  (91d8caad-0245-049f-5bdd-2a328952ebc8_1d1e492f48bac77)

0 / 68
https://www2.tusfiles.net/d/.../pijet_ngentot.3gp  (dd354009-7d80-410a-0c75-9cbaa6af4eea_1d1e498b2593621)

0 / 68
https://www2.tusfiles.net/d/.../Cew Bening(www999.xtgem.com).3gp  (b48b22dc-5faf-9235-fe8d-d9d189d5a986_1d1e49a8d096048)

0 / 68
https://www2.tusfiles.net/d/.../lulur memek(www999.xtgem.com.3gp  (4ec6aa28-5868-07d7-9ce6-4c6a55fc006f_1d1e49aa959901a)

0 / 68
https://www2.tusfiles.net/d/.../Memek mulus(www999.xtgem.com).3gp  (f45359d8-0f13-937e-ab8f-7786be322a21_1d1e49b8f964fe2)

0 / 68
https://www2.tusfiles.net/d/.../Kencan Dengan Anak SMP(www999.xtgem.com).3gp  (17928bf4-d734-abf2-f965-c1f84a3aa702_1d1e49bb04de1f5)

0 / 68
https://www2.tusfiles.net/d/.../Undangan Pesta Ultah.3gp  (4e295bb1-1795-b0b3-6665-ed2736b3a5d0_1d1e4a16fe90671)

0 / 68
https://www2.tusfiles.net/d/.../Aura kasih-ariel (www.bokepdo.com).3gp  (88eb5431-a417-e084-cff7-3b535e617ee8_1d1de50214c653a)

0 / 68
https://www2.tusfiles.net/d/.../Ore Monogatari.ass  (1baed9e5765f36f380182154f27128b4)

0 / 68

3 / 68      (PUP)

0 / 68

0 / 68

URL:
http://www2.tusfiles.net/

Title:
“File Server”

SSL certificate subject:
CN=*.tusfiles.net, OU=EssentialSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
nginx