home

fileshare2010.dfiles.ru

Songul Corporation

Domain Information

The domain fileshare2010.dfiles.ru registered by Songul Corporation was initially registered in February of 2009 through R01-RU. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
R01-RU

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Friday, February 20, 2009

Expires date:
Monday, February 20, 2017

ASN:
AS5577 ROOT root SA,LU

Root domain:
dfiles.ru

Whois:
1 dfiles.ru record

The domain fileshare2010.dfiles.ru has been seen to resolve to the following 6 IP addresses.

94.242.227.163
ip-static-94-242-227-163.as5577.net
August 24, 2016

94.242.236.45
ip-static-94-242-236-45.as5577.net
August 24, 2016

94.242.236.37
adrendns1.net
August 24, 2016

94.242.227.199
ip-static-94-242-227-199.as5577.net
August 24, 2016

94.242.227.195
ip-static-94-242-227-195.as5577.net
August 24, 2016

94.242.227.171
ip-static-94-242-227-171.as5577.net
August 24, 2016

File downloads found at URLs served by fileshare2010.dfiles.ru.

1 / 68
http://fileshare2010.dfiles.ru/auth-13940237349d960ed57cc6f3be605838-2.134.26.131-1315584452-143620849-guest/.../Minecraft.v1.5.2.setup.exe  (3a6877dcd8cb82a7d3631334ff2a68f2)

The following 3 files have been seen to comunicate with fileshare2010.dfiles.ru in live environments.

TCP » 94.242.227.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.45:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.163:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.195:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.199:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.227.171:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.199:80
online-guardian-v2.0.9.exe

URL:
http://fileshare2010.dfiles.ru/

Title:
“DepositFiles”

Description:
“DepositFiles provides you with a legitimate technical solution, which enables you to upload, store, access and download text, software, scripts, images, sounds, videos, animations and any other materials in form of one or several electronic fil...”

Web server:
nginx

depositfiles.com

depositfiles.org

dfiles.eu

gavitex.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.