home

fileshare2060.dfiles.ru

Private Person  (Proxy Registrant)

Domain Information

The domain fileshare2060.dfiles.ru is registered by proxy through R01-REG-RIPN and was originally registered in February of 2009. The hosted servers are located in Vaslui, Vaslui within Romania which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-REG-RIPN

Server location:
Vaslui, Romania (RO)

Create date:
Friday, February 20, 2009

Expires date:
Friday, February 20, 2015

ASN:
AS58207 M247-EUROPE-SRL M247 Europe SRL

Root domain:
dfiles.ru

Whois:
1 dfiles.ru record

The domain fileshare2060.dfiles.ru has been seen to resolve to the following 8 IP addresses.

94.242.236.57
ip-static-94-242-236-57.as5577.net
January 31, 2015

94.242.236.37
adrendns1.net
January 31, 2015

94.242.227.207
ip-static-94-242-227-207.as5577.net
January 31, 2015

94.242.227.203
ip-static-94-242-227-203.as5577.net
January 31, 2015

94.242.227.199
ip-static-94-242-227-199.as5577.net
January 31, 2015

94.242.227.191
ip-static-94-242-227-191.as5577.net
January 31, 2015

94.242.227.183
ip-static-94-242-227-183.as5577.net
January 31, 2015

31.14.252.90
no-rdns.clues.ro
May 31, 2014

File downloads found at URLs served by fileshare2060.dfiles.ru.

0 / 68
http://fileshare2060.dfiles.ru/auth-1390197116832a9eb6a4d57d450c4feb-5.142.114.37-1189601158-151637456-guest/.../uTorrentPortable_3.3.2_Final_Rus.exe  (81f08783433342a59c8ead6c6dbafa23)

0 / 68
http://fileshare2060.dfiles.ru/auth-1396778785fe23c117e49fb088804d80-128.69.37.109-1400647272-150592238-guest/.../ClassicShellSetup_3_6_4.exe  (02dbf18f9dee1c81a754be7b84c768c6)

The following 6 files have been seen to comunicate with fileshare2060.dfiles.ru in live environments.

TCP » 94.242.227.203:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.227.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.57:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.191:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.203:80
onlineguardian-v2.exe

TCP » 94.242.227.203:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.207:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.199:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.57:80
online-guardian-v2.exe

TCP » 94.242.227.203:80
online-guardian-v2.exe

TCP » 94.242.227.203:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.191:80
online-guardian-v2.exe

TCP » 94.242.227.199:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.207:80
onlineguardian-v2.exe

TCP » 94.242.236.57:80
onlineguardian-v2.exe

URL:
http://fileshare2060.dfiles.ru/

Web server:
nginx

depositfiles.com

depositfiles.org

dfiles.eu

gavitex.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.