home

defiletake.com

WHOIS PRIVACY PROTECTION SERVICE, INC.  (Proxy Registrant)

Domain Information

The domain defiletake.com is registered by proxy through ENOM, INC. and was originally registered in June of 2015. The hosted servers are located in Beaumaris, Victoria within Australia which resides on the Asia Pacific Network Information Centre network.
Registrar:
ENOM, INC.

Server location:
Victoria, Australia (AU)

Create date:
Monday, June 1, 2015

Expires date:
Wednesday, June 1, 2016

Updated date:
Monday, June 1, 2015

ASN:
AS133618 TRELLIAN-AS-AP Trellian Pty. Limited,AU

Whois:
1 defiletake.com record

The domain defiletake.com has been seen to resolve to the following 2 IP addresses.

103.224.182.241
lb-182-241.above.com
September 16, 2016

98.124.243.32
June 2, 2016

The following 12 files have been seen to comunicate with defiletake.com in live environments.

TCP » 103.224.182.241:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 103.224.182.241:80
uplus.exe (LoadMoneyWebSite)

TCP » 103.224.182.241:80
7tkkmsa v1.5.1.exe (KMS Activator by 7pm Tech)

TCP » 103.224.182.241:80
y03fd24.tmp

TCP » 103.224.182.241:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 103.224.182.241:80
torrent-search.exe (torrent-search)

TCP » 103.224.182.241:3000
dopipjen.exe

TCP » 103.224.182.241:80
online-guardian-v2.0.9.exe

TCP » 103.224.182.241:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 103.224.182.241:80
skype_addon.crx

TCP » 103.224.182.241:3000
fzegwzshmv.exe (Mmradpzyxy nasxbzmaqh epdrtoxayhvufidy xwldikaaz fvfm by Yyqlkf gweeginvoxdfd dcaliect mmvqzaspb ryitflkjseyc zsiydrsyv)

TCP » 103.224.182.241:3000
fuheabyq.exe

January 27, 2016
ttb.defiletake.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.