home

downloads.dlldll.ru

Private Person  (Proxy Registrant)

Domain Information

The domain downloads.dlldll.ru is registered by proxy through REGRU-RU and was originally registered in August of 2015. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Moscow City, Russia (RU)

Create date:
Tuesday, August 11, 2015

Expires date:
Thursday, August 11, 2016

ASN:
AS197695 AS-REGRU _Domain names registrar REG.RU_, Ltd, RU

Root domain:
dlldll.ru

Whois:
1 dlldll.ru record

The domain downloads.dlldll.ru has been seen to resolve to the following IP address.

37.140.192.157
server135.hosting.reg.ru
April 19, 2016

File downloads found at URLs served by downloads.dlldll.ru.

0 / 68
http://downloads.dlldll.ru/.../btnexgenipl32.dll.zip  (1e2514e9da18b8480f69d6abb50689e4)

The following file have been seen to comunicate with downloads.dlldll.ru in live environments.

TCP » 37.140.192.157:80
UCBrowser.exe (UC Browser by UCWeb)

URL:
http://downloads.dlldll.ru/

Title:
“Сайт надёжно припаркован и ожидает открытия”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.