home

static305.dfiles.eu

NOT DISCLOSED!  (Proxy Registrant)

Domain Information

The domain static305.dfiles.eu is registered by proxy through EuroDNS S.A.. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
EuroDNS S.A.

Server location:
Luxembourg, Luxembourg (LU)

ASN:
AS5577 ROOT root SA,LU

Root domain:
dfiles.eu

Whois:
1 dfiles.eu record

The domain static305.dfiles.eu has been seen to resolve to the following 20 IP addresses.

94.242.227.187
ip-static-94-242-227-187.as5577.net
February 21, 2016

94.242.227.179
ip-static-94-242-227-179.as5577.net
February 21, 2016

94.242.227.167
ip-static-94-242-227-167.as5577.net
February 21, 2016

94.242.227.163
ip-static-94-242-227-163.as5577.net
February 21, 2016

94.242.227.147
ip-static-94-242-227-147.as5577.net
February 21, 2016

94.242.236.65
ip-static-94-242-236-65.as5577.net
February 21, 2016

94.242.236.61
ip-static-94-242-236-61.as5577.net
February 21, 2016

94.242.236.53
server53.adrendns2.net
February 21, 2016

94.242.236.49
ip-static-94-242-236-49.as5577.net
February 21, 2016

94.242.236.41
ip-static-94-242-236-41.as5577.net
February 21, 2016

94.242.227.203
ip-static-94-242-227-203.as5577.net
February 21, 2016

94.242.227.191
ip-static-94-242-227-191.as5577.net
February 21, 2016

88.208.51.37
August 22, 2014

78.140.176.238
August 22, 2014

78.140.176.234
August 22, 2014

78.140.171.230
August 22, 2014

78.140.168.232
August 22, 2014

88.208.57.158
August 22, 2014

88.208.51.39
August 22, 2014

88.85.80.208
February 7, 2014

File downloads found at URLs served by static305.dfiles.eu.

1 / 68
http://static305.dfiles.eu/dfdownloader_nKnVvS_.exe  (dfdownloader_goybe5_.exe)

1 / 68
http://static305.dfiles.eu/dfdownloader_cq540E_.exe  (dfdownloader_v37rgd_.exe)

1 / 68
http://static305.dfiles.eu/dfdownloader_ETDaSD_.exe  (dfdownloader_goybe5_.exe)

The following 4 files have been seen to comunicate with static305.dfiles.eu in live environments.

TCP » 94.242.227.203:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.236.65:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.147:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.227.179:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.242.227.191:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.167:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.203:80
onlineguardian-v2.exe

TCP » 94.242.227.163:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.187:80
onlineguardian-v2.exe

TCP » 94.242.227.187:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.203:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.53:80
online-guardian-v2.0.9.exe

TCP » 94.242.236.61:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.167:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.179:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.203:80
online-guardian-v2.exe

TCP » 94.242.227.203:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.147:443
online-guardian-v2.0.9.exe

TCP » 94.242.227.147:80
online-guardian-v2.0.9.exe

TCP » 94.242.227.167:80
onlineguardian-v2.exe

 
Latest 20 of 25 files

URL:
http://static305.dfiles.eu/

Title:
“DepositFiles”

Description:
“DepositFiles provides you with a legitimate technical solution, which enables you to upload, store, access and download text, software, scripts, images, sounds, videos, animations and any other materials in form of one or several electronic fil...”

SSL certificate subject:
CN=*.dfiles.eu, OU=PremiumSSL Wildcard, O=KALMET INVESTMENTS LIMITED, STREET=1312 Victoria, L=Mahe, S=Mahe, C=SC

SSL certificate issuer:
CN=COMODO High-Assurance Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
nginx

depositfiles.com

depositfiles.org

dfiles.ru

gavitex.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.