Domain > file.org

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to file.org

MD5	A/V
1136a7bbf562dce67dc22330a63ee2b8	[W32.Clod444.Trojan.afad] [PUP.Optional.Installcore] [Adware.InstallCore.133]
a191b5f3c7ab377b10d50632538975d4	[W32.Cloda48.Trojan.1343] [Artemis!A191B5F3C7AB] [WS.Reputation.1] [PUA.InstallCore!] [Adware.InstallCore.122] [Adware/InstallCore.CQ.1] [SoftwareBundler:Win32/DealPly] [Downware.InstallCore] [Win32/InstallCore.BL] [PE:Malware.InstallCore!6.4] [SoftwareBundler] [W32/InstallCore.BL]
0577a3a87c838ccbcadc61ae7c476a1c	[Artemis!0577A3A87C83] [Trojan.Packed.24524] [Adware/InstallCore.A.144] [Win32.Application.InstallCore.L] [Riskware/InstallCore] [MalSign.InstallC.5CF] [Win32/Virus.Adware.cb3]
54d762432f503d3807ce2c455785b9b3
cf956460c69ed5e577d11ba698506380	[W32.HfsAdware.8C6B] [PUP.Optional.TSA] [W32/A-dbe1ec51!Eldorado] [Riskware.Win32.InstallCore.dfgmed] [W32/A-dbe1ec51!Eldorado] [Downware.InstallCore] [PUA.InstallCore!] [Backdoor.Hupigon] [Riskware/InstallCore] [Win32/Virus.Adware.94c]
0e74a8a68fcb7ffb1a177eb8c32a775d	[W32.HfsAdware.8C6B] [Artemis!0E74A8A68FCB] [PUP.Optional.TSA] [W32/A-dbe1ec51!Eldorado] [Riskware.Win32.InstallCore.dfgmed] [ApplicUnwnt] [Trojan.Packed.25266] [Artemis!PUP] [W32/A-dbe1ec51!Eldorado] [Downware.InstallCore] [PUA.InstallCore!] [Backdoor.Hupigon] [Riskware/InstallCore] [Trusops.C4B] [Win32/Virus.Adware.94c]
3037d7867e7af85559f209ca297fe510	[Riskware/InstallCore]
540e28127866bc99e030fd94cc5efed6	[Artemis!540E28127866] [PUP.Optional.InstallCore] [PUA.InstallCore!] [Application.Win32.InstallCore.BWAN] [Trojan.MulDrop5.10078] [Downware.InstallCore] [Win32/InstallCore.MC] [Riskware/InstallCore]
1886da81fc1132022982cffe7eee79b1	[Artemis!1886DA81FC11] [PUP.Optional.Bitberry] [PUA.InstallCore!] [Trojan.Packed.2782] [Downware.InstallCore] [PE:Malware.XPACK-LNR/Heur!1.5594]
8ae08bdf9501d41191ff8651cdf29a71	[Artemis!8AE08BDF9501] [Adware.InstallCore.133] [PUP.InstallCore/Variant] [PE:Malware.XPACK-LNR/Heur!1.5594]
077659a5980c29712daa44b9dd779923	[PUP.Optional.InstallCore] [Adware.InstallCore.133] [Signed-Adware.InstallCore]
dc2cd97e74ef29298982af9abca540ca	[Artemis!DC2CD97E74EF] [PUP.InstallCore/Variant] [Adware.InstallCore.133] [PE:Malware.XPACK-LNR/Heur!1.5594]
268c1c569f4c8118e455d5760ee17030	[Artemis!268C1C569F4C] [PUP.Optional.InstallCore] [PUA.InstallCore!] [Application.Win32.InstallCore.BWAN] [Trojan.MulDrop5.10078] [Downware.InstallCore] [Win32/InstallCore.MC] [Riskware/InstallCore] [Win32/RootKit.Rootkit.7e5]

DNS Resolutions

Date	IP Address
2011-08-28	205.234.175.175 (ClassC)
2013-06-13	50.7.98.114 (ClassC)
2013-06-16	162.210.192.129 (ClassC)
2013-07-01	206.190.138.52 (ClassC)
2013-07-04	216.155.144.132 (ClassC)
2013-10-13	46.165.230.11 (ClassC)
2013-11-15	66.39.64.146 (ClassC)
2019-09-05	66.39.64.146 (ClassC)
2024-02-13	104.26.6.207 (ClassC)
2024-02-22	104.26.7.207 (ClassC)
2024-02-28	172.67.75.4 (ClassC)
2024-03-09	104.21.62.37 (ClassC)
2024-03-09	172.67.219.109 (ClassC)
2025-12-12	104.26.0.228 (ClassC)
2026-01-02	172.67.69.28 (ClassC)
2026-01-20	104.26.1.228 (ClassC)

HTTP/1.1 200 OKDate: Fri, 06 Sep 2019 02:36:01 GMTServer: Apache/2.4.41Cache-Control: max-age172800Expires: Sun, 08 Sep 2019 02:36:01 GMTVary: Accept-EncodingConnection: keep-aliveTransfer-Encoding: c

!doctype html>html langen>head>	meta charsetutf-8>meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1>meta nameformat-detection contenttelephoneno>title>File.org - We help you open your files!/title>script typetext/javascript>window.google_analytics_uacct  UA-20040237-5;/script>link relshortcut icon typeimage/x-icon hrefhttps://kcdn.file.org/images/favicon.ico>link hrefhttps://fonts.googleapis.com/css?familyOpen+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&displayswap relstylesheet>link relstylesheet hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/4.1.0/css/bootstrap.min.css>link relstylesheet hrefhttps://kcdn.file.org/css/bootstrap4hack.css>link relstylesheet typetext/css hrefhttps://kcdn.file.org/css/style-20190822.css>link relstylesheet typetext/css hrefhttps://kcdn.file.org/css/responsive-20190822.css>!--if lt IE 9>script typetext/javascript src/js/html5shiv.min.js>/script>script typetext/javascript src/js/IE9.js>/script>style>/style>!endif-->!-- type and data-cookieconsent values are for cookiebot prior consent -->script typetext/plain data-cookieconsentstatistics>(function(i,s,o,g,r,a,m){iGoogleAnalyticsObjectr;irir||function(){(ir.qir.q||).push(arguments)},ir.l1*new Date();as.createElement(o),ms.getElementsByTagName(o)0;a.async1;a.srcg;m.parentNode.insertBefore(a,m)})(window,document,script,//www.google-analytics.com/analytics.js,ga);ga(create, UA-20040237-5, auto);ga(set, anonymizeIp, true);ga(send, pageview);/script>script idCookiebot srchttps://consent.cookiebot.com/uc.js data-cbidc91cdcff-9b45-48f5-b1d3-90c46faa1cb6 typetext/javascriptasync>/script>	meta namewot-verification contenta2d252fa848b2ab771db/>	meta nameavgthreatlabs-verification content3eb593c6ef1887a10678e7acc2a1c2d9378700ba />/head>body>	!-- wrapper starts -->	div classsidemenu>	/div>	!-- WRAPPER BEGIN -->	div classwrapper>		header classindex-shadow>			div classcontainer>				div classheader-in clearfix d-flex flex-wrap>					div classlogo>						a href/>img srchttps://kcdn.file.org/images/logo.png width271 height60

Subdomains

Date	Domain	IP
cdn1.file.org	2013-10-09	205.234.175.175
cdn3.file.org	2014-10-21	205.234.175.175
kcdn.file.org	2021-07-02	104.26.6.207
dl01eu.file.org	2013-11-15	46.165.230.11

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > file.org

Is this malicious?

Files that talk to file.org

DNS Resolutions

Port 80

Port 443

Subdomains