home

gsoft.fromru.com

Media Mir Ltd.

Domain Information

The domain gsoft.fromru.com registered by Media Mir Ltd. was initially registered in January of 2001 through JSC REGISTRAR R01. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
JSC REGISTRAR R01

Server location:
Moscow City, Russia (RU)

Create date:
Monday, January 15, 2001

Expires date:
Sunday, January 15, 2017

Updated date:
Thursday, April 14, 2016

ASN:
AS25159 SONICDUO-AS OJSC MegaFon,RU

Root domain:
fromru.com

Whois:
1 fromru.com record

The domain gsoft.fromru.com has been seen to resolve to the following 2 IP addresses.

195.16.127.157
gamma.itmm.ru
April 21, 2016

195.16.127.102
delta.itmm.ru
April 21, 2016

File downloads found at URLs served by gsoft.fromru.com.

0 / 68
http://gsoft.fromru.com/.../tm14setup.exe  (71bab4e8a026402719b6bb8242b008a3)

The following 3 files have been seen to comunicate with gsoft.fromru.com in live environments.

TCP » 195.16.127.102:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 195.16.127.157:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 195.16.127.157:443
produpd.exe (produpd.exe by Vested Development, Inc)

URL:
http://gsoft.fromru.com/

Google Analytics:
UA-34444697

Title:
“QIP.RU”

Description:
“QIP.RU - новости и развлечения. Сайт объединяет в себе все необходимые пользователям сервисы: почту, поиск, знакомства, хранение данных: фото, видео, файлов, а так же широкий спектр различных онлайн игр.”

Web server:
nginx

photofile.ru

qip.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.