home

fileshare2080.dfiles.ru

Private Person  (Proxy Registrant)

Domain Information

The domain fileshare2080.dfiles.ru is registered by proxy through R01-RU and was originally registered in February of 2009. The hosted servers are located in Vaslui, Vaslui within Romania which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-RU

Server location:
Vaslui, Romania (RO)

Create date:
Friday, February 20, 2009

Expires date:
Friday, February 20, 2015

ASN:
AS58207 M247-EUROPE-SRL M247 Europe SRL

Root domain:
dfiles.ru

Whois:
2 dfiles.ru records

The domain fileshare2080.dfiles.ru has been seen to resolve to the following 15 IP addresses.

94.242.236.49
ip-static-94-242-236-49.as5577.net
September 5, 2014

94.242.227.203
ip-static-94-242-227-203.as5577.net
September 5, 2014

94.242.227.155
ip-static-94-242-227-155.as5577.net
September 5, 2014

94.242.227.151
ip-static-94-242-227-151.as5577.net
September 5, 2014

94.242.227.147
ip-static-94-242-227-147.as5577.net
September 5, 2014

94.242.236.85
ip-static-94-242-236-85.as5577.net
September 5, 2014

94.242.236.81
ip-static-94-242-236-81.as5577.net
September 5, 2014

94.242.227.199
ip-static-94-242-227-199.as5577.net
August 23, 2014

94.242.227.167
ip-static-94-242-227-167.as5577.net
August 23, 2014

94.242.236.93
ip-static-94-242-236-93.as5577.net
August 23, 2014

94.242.236.65
ip-static-94-242-236-65.as5577.net
August 23, 2014

94.242.236.57
ip-static-94-242-236-57.as5577.net
August 23, 2014

94.242.236.41
ip-static-94-242-236-41.as5577.net
August 23, 2014

94.242.227.207
ip-static-94-242-227-207.as5577.net
August 23, 2014

31.14.252.92
no-rdns.clues.ro
February 14, 2014

File downloads found at URLs served by fileshare2080.dfiles.ru.

4 / 68      (Malware)
http://fileshare2080.dfiles.ru/auth-13944117523ac99fbd2cd729d9369677-94.181.50.68-1327836667-153044699-guest/.../KMSpico 9.2.1 beta.exe  (kmspico_setup.exe)

4 / 68      (inconclusive)
http://fileshare2080.dfiles.ru/auth-1398873458735e86592e855fc86ddb4f-83.139.147.123-1462797951-154141525-guest/.../NOD32view7_01.exe  (431f61165221c69aa0999f8a3372ccf5)

0 / 68
http://fileshare2080.dfiles.ru/auth-1392038530fd96e65077b410f20b2e1f-91.76.194.225-1254816203-20063109-guest/.../Metallica.exe  (4c674d2f3df5c5e23998dd532dc66875)

The following 8 files have been seen to comunicate with fileshare2080.dfiles.ru in live environments.

TCP » 94.242.227.155:80
onlineguardian-v2.exe

TCP » 94.242.227.203:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.65:80
online-guardian-v2.0.9.exe

TCP » 31.14.252.92:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 94.242.227.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.57:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.147:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.227.155:80
onlineguardian-v2.exe

TCP » 94.242.227.167:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.203:80
onlineguardian-v2.exe

TCP » 94.242.227.203:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.207:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.151:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.199:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.57:80
online-guardian-v2.exe

TCP » 94.242.227.167:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.203:80
online-guardian-v2.exe

TCP » 94.242.227.203:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.147:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.147:80
online-guardian-v2.0.9.exe

 
Latest 20 of 31 files

URL:
http://fileshare2080.dfiles.ru/

Title:
“DepositFiles”

Description:
“[[ state.current.data.description ]]”

SSL certificate subject:
CN=*.dfiles.ru, OU=PremiumSSL Wildcard, O=KALMET INVESTMENTS LIMITED, STREET=1312 Victoria, L=Mahe, S=Mahe, C=SC

SSL certificate issuer:
CN=COMODO High-Assurance Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
nginx

depositfiles.com

depositfiles.org

dfiles.eu

gavitex.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.