home

fileshare3670.dfiles.ru

Private Person  (Proxy Registrant)

Domain Information

The domain fileshare3670.dfiles.ru is registered by proxy through R01-RU and was originally registered in February of 2009. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-RU

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Friday, February 20, 2009

Expires date:
Saturday, February 20, 2016

ASN:
AS5577 ROOT root SA,LU

Root domain:
dfiles.ru

Whois:
2 dfiles.ru records

The domain fileshare3670.dfiles.ru has been seen to resolve to the following 13 IP addresses.

94.242.236.45
ip-static-94-242-236-45.as5577.net
July 1, 2015

94.242.236.37
adrendns1.net
July 1, 2015

94.242.236.33
ip-static-94-242-236-33.as5577.net
July 1, 2015

94.242.227.199
ip-static-94-242-227-199.as5577.net
July 1, 2015

94.242.227.179
ip-static-94-242-227-179.as5577.net
July 1, 2015

94.242.227.159
ip-static-94-242-227-159.as5577.net
July 1, 2015

94.242.227.151
ip-static-94-242-227-151.as5577.net
July 1, 2015

94.242.236.69
ip-static-94-242-236-69.as5577.net
July 1, 2015

94.242.236.61
ip-static-94-242-236-61.as5577.net
July 1, 2015

94.242.236.57
ip-static-94-242-236-57.as5577.net
July 1, 2015

94.242.236.53
server53.adrendns2.net
July 1, 2015

94.242.236.49
ip-static-94-242-236-49.as5577.net
July 1, 2015

78.140.171.101
December 2, 2014

File downloads found at URLs served by fileshare3670.dfiles.ru.

0 / 68
http://fileshare3670.dfiles.ru/auth-1397834037af4272af9392fa7849907a-37.54.75.67-1431948274-128693053-guest/.../RusTV_player_2.4.exe  (69905be97855114f5446197d3914b64f)

0 / 68
http://fileshare3670.dfiles.ru/auth-1409139434c2b30c91d4392be3070ce8-78.56.119.196-1637346911-154842838-guest/.../CODBO2-FULL.exe  (f2c2adb3d4619e74a7cea08bd30a57b7)

The following 5 files have been seen to comunicate with fileshare3670.dfiles.ru in live environments.

TCP » 94.242.227.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.57:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.179:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.45:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.69:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.33:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.151:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.199:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.53:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.57:80
online-guardian-v2.exe

TCP » 94.242.236.61:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.179:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.151:80
online-guardian-v2.exe

TCP » 94.242.227.199:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.49:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.57:80
onlineguardian-v2.exe

URL:
http://fileshare3670.dfiles.ru/

Title:
“DepositFiles”

Description:
“DepositFiles provides you with a legitimate technical solution, which enables you to upload, store, access and download text, software, scripts, images, sounds, videos, animations and any other materials in form of one or several electronic fil...”

Web server:
nginx

dfiles.eu

depositfiles.com

depositfiles.org

gavitex.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.