» 02hl.shafafanxin.cn
Overview
Analysis
IPs Addresses (1)
Downloads (3)
Related Domains (9)

02hl.shafafanxin.cn

Domain Information

Server location:

Guangdong, China (CN)

ASN:

AS58543 CHINATELECOM-GUANGDONG-IDC Guangdong,CN

Root domain:

shafafanxin.cn

Scanner detections:

Malware distribution (100% detected)

Scan engine

Details

Detections

Microsoft Security Essentials

Threat.Undefined

100.00%

VIPRE Antivirus

Threat.4276445

66.67%

ESET NOD32

Win32/Neshta.A virus

66.67%

avast!

Win32:Apanas [Trj]

66.67%

F-Secure

Win32.Neshta.A

66.67%

F-Prot

W32/HLLP.41472

66.67%

Reason Heuristics

PUP.Bundler (L)

33.33%

McAfee

Trojan.Artemis!1465DBF8FDD5

33.33%

Dr.Web

Win32.HLLP.Neshta

33.33%

Norman

Win32.Neshta.A

33.33%

The domain 02hl.shafafanxin.cn has been seen to resolve to the following IP address.

183.61.16.134

June 7, 2016

File downloads found at URLs served by 02hl.shafafanxin.cn.

8 / 68 (Malware)

http://02hl.shafafanxin.cn/.../?aGV6aS9xaC9zZXR1cF83ZG93bi0xNDgw (setup_7down-1480_89t.exe)

7 / 68 (Malware)

http://02hl.shafafanxin.cn/.../?aGV6aS9xaC9zZXR1cF83ZG93bi0xNDgw (setup_7down-1480_zvw.exe)

2 / 68 (PUP)

http://02hl.shafafanxin.cn/.../?aGV6aS9xaC9zZXR1cF83ZG93bi0xNDgw (hd_mp4ba-1280_t9k.exe)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.