home

fileshare9080.depositfiles.org

Kalmet Investments Limited

Domain Information

The hosted servers are located in Prague, Hlavni Mesto Praha within Czech Republic which resides on the RIPE Network Coordination Centre network.
Registrar:
EuroDNS S.A. (R1721-LROR)

Server location:
Hlavni Mesto Praha, Czech Republic (CZ)

ASN:
AS43355 UPL-TELECOM-AS UPL Telecom s.r.o.,CZ

Root domain:
depositfiles.org

Whois:
1 depositfiles.org record

The domain fileshare9080.depositfiles.org has been seen to resolve to the following 7 IP addresses.

94.242.227.155
ip-static-94-242-227-155.as5577.net
August 29, 2016

94.242.227.139
ip-static-94-242-227-139.as5577.net
August 29, 2016

94.242.227.135
ip-static-94-242-227-135.as5577.net
August 29, 2016

94.242.236.61
ip-static-94-242-236-61.as5577.net
August 29, 2016

94.242.227.191
ip-static-94-242-227-191.as5577.net
August 29, 2016

94.242.227.163
ip-static-94-242-227-163.as5577.net
August 29, 2016

78.108.179.231
s20708.yeshost.ru
April 30, 2014

File downloads found at URLs served by fileshare9080.depositfiles.org.

14 / 68    (Malware)
http://fileshare9080.depositfiles.org/auth-13757253393ea7c7888ea4f393e29f3b-177.96.142.251-680411844-113662743-guest/.../ElfBot-4.5.9.exe  (7282aa8e4e4453fbc07eb242ffec532f)

0 / 68
http://fileshare9080.depositfiles.org/auth-1391560304d9abac71172b18ad03c481-189.231.11.93-1239892271-123972966-guest/.../MKV-Codec-Pack-2010-10-10.exe  (combined-community-codec-pack-2010-10-10.exe)

The following 5 files have been seen to comunicate with fileshare9080.depositfiles.org in live environments.

TCP » 94.242.227.155:80
onlineguardian-v2.exe

TCP » 94.242.227.135:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.155:80
onlineguardian-v2.exe

TCP » 94.242.227.191:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.163:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.135:80
onlineguardian-v2.exe

TCP » 94.242.227.139:80
online-guardian-v2.exe

TCP » 94.242.227.139:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.61:80
online-guardian-v2.0.9.exe

TCP » 78.108.179.231:80
MiPony.exe (Mipony by www.mipony.net)

TCP » 94.242.227.155:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.191:80
online-guardian-v2.exe

URL:
http://fileshare9080.depositfiles.org/

Web server:
nginx

dfiles.ru

depositfiles.com

dfiles.eu

gavitex.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.