home

fileshare1120.dfiles.ru

Kalmet Investments Limited

Domain Information

The domain fileshare1120.dfiles.ru registered by Kalmet Investments Limited was initially registered in February of 2009 through R01-RU. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-RU

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Friday, February 20, 2009

Expires date:
Saturday, February 20, 2016

ASN:
AS5577 ROOT root SA,LU

Root domain:
dfiles.ru

Whois:
2 dfiles.ru records

The domain fileshare1120.dfiles.ru has been seen to resolve to the following IP address.

94.242.227.182
ip-static-94-242-227-182.server.lu
July 23, 2015

File downloads found at URLs served by fileshare1120.dfiles.ru.

0 / 68
http://fileshare1120.dfiles.ru/auth-1432227045b7e3a37d74ba780a0ea514-92.100.135.85-2078587818-160073693-guest/.../OGSE_0692_R2 StalkerMods.ru.exe  (stalker_ogse_0692_r2.exe)

0 / 68
http://fileshare1120.dfiles.ru/auth-14366234661bcfbbf11663c97da8eb77-95.167.157.198-2177439804-33004845-guest/.../195.62_desktop_win7_winvista_32bit_international_whql.exe  (c3ba5c8e34d5528e55ea5b599b3d5bdc)

The following file have been seen to comunicate with fileshare1120.dfiles.ru in live environments.

TCP » 94.242.227.182:80
MiPony.exe (Mipony by www.mipony.net)

URL:
http://fileshare1120.dfiles.ru/

Web server:
nginx

dfiles.eu

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.