home

dl1.getcs16.ru

Private Person  (Proxy Registrant)

Domain Information

The domain dl1.getcs16.ru is registered by proxy through REGRU-RU and was originally registered in August of 2013. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Moscow City, Russia (RU)

Create date:
Saturday, August 24, 2013

Expires date:
Wednesday, August 24, 2016

ASN:
AS28917 FIORD-AS JSC _TRC FIORD_,RU

Root domain:
getcs16.ru

Whois:
2 getcs16.ru records

The domain dl1.getcs16.ru has been seen to resolve to the following IP address.

80.77.174.156
80-77-174-156.colo.fiord.ru
May 5, 2015

File downloads found at URLs served by dl1.getcs16.ru.

0 / 68
http://dl1.getcs16.ru/dl.php?id=2128&f=cs16_original.exe  (43e4442db997bc578e1edd21394411eb)

0 / 68
http://dl1.getcs16.ru/dl.php?id=1993&s=1&f=cs16_classic.exe  (11fe50a55037db51df0b3145e1e212d0)

0 / 68
http://dl1.getcs16.ru/dl.php?id=2128&f=cs16_original.exe  (e148ad2e9593a2d116d09bc630afac9a)

0 / 68
http://dl1.getcs16.ru/dl.php?id=3460&s=&f=cs16_original.exe  (e148ad2e9593a2d116d09bc630afac9a)

0 / 68
http://dl1.getcs16.ru/dl.php?id=2786&f=cs16_original.exe  (8217147e00bc9eaf275d9cd39df842dd)

0 / 68
http://dl1.getcs16.ru/dl.php?id=2701&s=&f=cs16_original.exe  (e148ad2e9593a2d116d09bc630afac9a)

0 / 68
http://dl1.getcs16.ru/dl.php?id=2128&f=cs16_original.exe  (8217147e00bc9eaf275d9cd39df842dd)

The following file have been seen to comunicate with dl1.getcs16.ru in live environments.

TCP » 80.77.174.156:80
ntcontrolsvc.exe (by RapidLights)

URL:
http://dl1.getcs16.ru/

Web server:
Apache/2.2.22 (Debian)

getcs16.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.