home

stg436.rusfolder.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain stg436.rusfolder.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in June of 2010. The hosted servers are located in Kiev, Kyyiv within Ukraine which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Kyyiv, Ukraine (UA)

Create date:
Friday, June 25, 2010

Expires date:
Saturday, June 25, 2016

Updated date:
Monday, June 8, 2015

ASN:
AS29632 NASSIST-AS NetAssist LLC,RU

Root domain:
rusfolder.com

Whois:
1 rusfolder.com record

The domain stg436.rusfolder.com has been seen to resolve to the following IP address.

195.214.214.9
uaif1.ifolder.ru
May 23, 2016

File downloads found at URLs served by stg436.rusfolder.com.

0 / 68
http://stg436.rusfolder.com/.../?43156916&zxXBfXZnLvYmZoJwKmjLumcw3OTjEl0sQW4byOVE9PqVR9ikmm8ysTXqZdMauyRibhCtABybggM=  (ripoutoffice2007 (vale para 2010).exe)

1 / 68      (Malware)
http://stg436.rusfolder.com/.../?43156916&zxXBfXZnLvYmZoJwKmjLumcw3OTjEl0sQW4byOVE9PqVR9ikmm8ysTXqZdMauyRibhCtABybggM=  (ripoutoffice2007.exe)

The following file have been seen to comunicate with stg436.rusfolder.com in live environments.

TCP » 195.214.214.9:80
AdMunch.exe (Ad Muncher by Murray Hurps Software Pty)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.