home

c2.72zx.com

Domain Information

Server location:
Tianjin, China (CN)

ASN:
AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone,CN

Root domain:
72zx.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Gaofenquming.B potentially unwanted (variant)
100.00%

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
100.00%

IKARUS anti.virus
PUA.Gaofenquming
100.00%

AVG
Generic
100.00%

Reason Heuristics
PUP.Gaofenquming (M)
100.00%

The domain c2.72zx.com has been seen to resolve to the following 4 IP addresses.

125.39.5.8
no-data
June 6, 2016

27.209.182.8
June 6, 2016

125.39.5.36
no-data
June 6, 2016

125.39.5.33
no-data
June 6, 2016

File downloads found at URLs served by c2.72zx.com.

5 / 68      (PUP)
http://c2.72zx.com/.../???????_40@21730.exe  (winrar_5.30_8100000001687019769.exe)

97you.net

cdndown.net

d1xn.com

diyidan.net

duomi.com

eastday.com

glodon.com

imgo.tv

miwifi.com

nonglirili.net

pcjoy.cn

pconline.com.cn

pplive.com

rilibiao.com.cn

shoujiduoduo.com

sogou.com

theworld.cn

wannianli365.com

yingyonghui.com

zhonghuchina.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.