home

s142.turbobit.net

Fundacion Private Whois  (Proxy Registrant)

Domain Information

The domain s142.turbobit.net is registered by proxy through INTERNET.BS CORP. and was originally registered in January of 2009. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
INTERNET.BS CORP.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Monday, January 12, 2009

Expires date:
Monday, January 12, 2015

Updated date:
Monday, December 9, 2013

ASN:
AS16265 FIBERRING LeaseWeb B.V.,NL

Root domain:
turbobit.net

Whois:
1 turbobit.net record

The domain s142.turbobit.net has been seen to resolve to the following IP address.

95.211.188.83
hosted-by.leaseweb.com
December 25, 2013

File downloads found at URLs served by s142.turbobit.net.

0 / 68
http://s142.turbobit.net:9006/download.php?name=CSGO-NON-STEAM -(WWW.ZEYBEKGAMING.NET)-.rar&md5=a3dc6ad834d26167607171b342624fea&fid=01xeoh5y6zqn&uid=free&speed=59&till=1455989806&trycount=1&ip=31.206.87.166&sid=202940665284cdbfc6fd92386fba1b7b&browser=06d3d9617a2883877c8f5e774e52c741&did=1758781140&sign=acf6507492dd7eb8264579b6c8c4d7ee  (a3dc6ad834d26167607171b342624fea)

0 / 68
http://s142.turbobit.net:9012/download.php?name=Hileli ADAM Mini Hack.rar&md5=6180d7480772db53b2417d13807d89b5&fid=0eybmiqcy2zw&uid=free&speed=59&till=1440346712&trycount=1&ip=88.252.36.151&sid=3eee01cd0db7bad9827209c6b1e791d5&browser=6c87615462301d709781c5732ebdb395&did=1642218042&sign=549958df8bfcb60b4cdb9fc74c7ab946  (Hileli ADAM Mini Hack.rar)

4 / 68      (Malware)
http://s142.turbobit.net:9012/download.php?name=AdwCleaner 3.310 Portable.exe&md5=1b151cce618be06c22b55fd4b502b75e&fid=86pwwro2rb56&uid=free&speed=59&till=1411637874&trycount=1&ip=81.198.5.161&sid=2d8781a5e7a62f0ac04cdf4780c6ba10&browser=e794040f10c2c6cebf348c211fefa16b&did=1408625287&sign=dc66282a7a1c27f9c73b8003e45096d8  (adwcleaner_3.310.exe)

0 / 68
http://s142.turbobit.net:9020/download.php?name=PDF-ToolsPortable_4.0.211.paf.exe&md5=97a102d31cad4a5413d8d46165d7ecc0&fid=t6pkxnznebeo&uid=free&speed=59&till=1387541264&trycount=1&ip=84.0.87.247&sid=fc40ababf6ec60620867d29581d8c2a2&browser=2a45585bf6fbca9e24972054edb9a714&did=1179444674&sign=4eb7a2a6dc08fe45134a27afc496c4f3  (97a102d31cad4a5413d8d46165d7ecc0)

The following 2 files have been seen to comunicate with s142.turbobit.net in live environments.

TCP » 95.211.188.83:9021
MiPony.exe (Mipony by www.mipony.net)

TCP » 95.211.188.83:80
USDownloader.exe (Universal Share Downloader by Tiger grp (www.dimonius.ru))

URL:
http://s142.turbobit.net/

Web server:
nginx/0.8.54 (PHP/5.3.6)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.