home

cath.gclub888.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain cath.gclub888.com is registered by proxy through WILD WEST DOMAINS, LLC and was originally registered in January of 2008. The hosted servers are located in Taipei, T'Ai-Wan within Taiwan which resides on the Asia Pacific Network Information Centre network.
Registrar:
WILD WEST DOMAINS, LLC

Server location:
T'Ai-Wan, Taiwan (TW)

Create date:
Wednesday, January 2, 2008

Expires date:
Monday, January 2, 2017

Updated date:
Thursday, December 3, 2015

ASN:
AS45250 VOCOM-TW-AS Vocom International Telecommunications Inc. Taiwan POP Internet Service Srovider,TW

Root domain:
gclub888.com

Whois:
1 gclub888.com record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Trend Micro House Call
TROJ_GE.84766150, TROJ_GE.F517C600, TROJ_GEN.F47V1121
100.00%

avast!
Win32:Dropper-gen [Drp], Win32:PUP-gen [PUP]
100.00%

IKARUS anti.virus
Virus.Win32.Dropper, Win32.Malware
100.00%

K7 AntiVirus
Trojan
66.67%

VIPRE Antivirus
Trojan.Win32.Generic
66.67%

Trend Micro
TROJ_GE.84766150, TROJ_GE.F517C600
66.67%

G Data
Win32.Trojan.Agent.OSLJDE
66.67%

McAfee
Artemis!E4CFEADC65E3, Artemis!135FC3D9DAE9
66.67%

Norman
Suspicious_Gen4.CEFEU
66.67%

Total Defense
Heur/TrojanHorse.ZCIA!suspicious
33.33%

Avira AntiVirus
TR/Agent.20558371
33.33%

The domain cath.gclub888.com has been seen to resolve to the following IP address.

114.199.66.15
January 6, 2016

File downloads found at URLs served by cath.gclub888.com.

0 / 68
http://cath.gclub888.com/.../setup_en_us.exe  (6a763eea660d4c2c675abc3a14babfdc)

0 / 68
http://cath.gclub888.com/.../setup_th_th.exe  (21a0075f54c40ddd9b995c8597d5fdd1)

0 / 68
http://cath.gclub888.com/.../setup_th_th.exe  (92d971acd3e8d86e32af4e31593ed980)

0 / 68
http://cath.gclub888.com/.../setup_th_th.exe  (b2dc8422c7d777351cb43ab8e5aed289)

0 / 68
http://cath.gclub888.com/setup_th_th.exe  (957cc9f236e6a84badb802425f12560f)

9 / 68      (Malware)
http://cath.gclub888.com/.../setup_th_th.exe  (135fc3d9dae96863becd64603e8bc3c7)

5 / 68      (PUP)
http://cath.gclub888.com/.../setup_th_th.exe  (ba38a7a61fb071ea30b60c61f6cabc08)

0 / 68
http://cath.gclub888.com/.../setup_th_th.exe  (25a1cad1600ecd742c4ffd88cbb92987)

9 / 68      (Malware)
http://cath.gclub888.com/setup_th_th.exe  (e4cfeadc65e399dd701d8eae37d98a96)

URL:
http://cath.gclub888.com/

Web server:
Apache/2.2.0 (Fedora) PHP/5.2.12 (PHP/5.2.12)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.