download2265.mediafire.com
Classification: Malicious
download2265.mediafire.com is a malicious hostname. 17 sightings from 4 threat sources (Generic Malware, Malware Download), last seen 2026-10-25.
Current activity
- Offline — no longer resolving. Last online 2026-11-07 06:00:18.
- Malware distribution — This indicator is distributing malware.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in AR, BR, CL, GT, MX, PE and US, across education, energy, healthcare and transportation networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-10-25 18:15:22 | 2026-10-25 18:15:22 | anomalous-activity country_code:ar country_code:br country_code:cl country_code:gt country_code:mx country_code:pe country_code:us industry:education-and-nonprofits industry:energy-and-utilities industry:healthcare-and-pharmaceutical industry:transportation-and-logistics malware | |
| Malware Download | URLhaus Abuse.ch | 2026-10-25 17:31:36 | 2026-10-25 17:31:36 | anomalous-activity malware | |
| Donutloader | Triage | 2026-07-30 20:59:19 | 2026-07-30 20:59:19 | compromised malicious-activity | |
| Top Popularity Site | Cisco Umbrella | 2022-07-19 03:17:16 | 2024-08-20 13:58:21 | benign | |
| Riskware.Wacapew | Hybrid-Analysis | 2021-04-14 09:15:57 | 2021-04-14 09:15:57 | ||
| Generic.Malware | Hybrid-Analysis | 2019-07-18 12:45:17 | 2021-03-25 06:15:29 |
Tags
donutloader adware bootkit collection discovery execution loader persistence privilege_escalation spyware malware pw-8866 stealerIP addresses resolved by this hostname
- 199.91.155.6 (2026-10-27 04:35:06)
Whois information
- AS name
- AS46179 MediaFire, LLC
- Domain
- mediafire.com
- TLD
- com
- DNSSEC
- ['signedDelegation, unsigned']
- Nameservers
- KEN.NS.CLOUDFLARE.COM, LISA.NS.CLOUDFLARE.COM, ken.ns.cloudflare.com, lisa.ns.cloudflare.com
- Registrant
- Cloudflare, Inc.
- Address
- DATA REDACTED
- City
- DATA REDACTED
- State
- TX
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2002-08-11 15:31:16
- Domain expires
- 2031-08-11 15:31:16
- First indexed
- 2019-07-18 12:45:17
- Last updated
- 2026-11-07 06:00:18