home

cpa.baidusd2016.com

SAN ZHANG

Domain Information

The domain cpa.baidusd2016.com registered by SAN ZHANG was initially registered in May of 2015 through ENOM, INC.. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
Luxembourg, Luxembourg (LU)

Create date:
Monday, May 4, 2015

Expires date:
Wednesday, May 4, 2016

Updated date:
Monday, May 25, 2015

ASN:
AS5577 ROOT root SA,LU

Root domain:
baidusd2016.com

Whois:
1 baidusd2016.com record

The domain cpa.baidusd2016.com has been seen to resolve to the following IP address.

94.242.228.117
Hosted.By.Evoluso.com
February 21, 2016

File downloads found at URLs served by cpa.baidusd2016.com.

0 / 68
http://cpa.baidusd2016.com/.../qqpcmgr_v10.11.16588.235_72898_Silence.exe  (49dea16e9f0bb03e13dac88c3cd21bba)

0 / 68
http://cpa.baidusd2016.com/.../qqpcmgr_v10.7.16065.215_71647_Silence.exe  (e17f0ce84e299059f97c01305846ff2d)

2 / 68
http://cpa.baidusd2016.com/.../install1809720.exe  (b03ab736ef6c17a19da4d6a36c64576a)

1 / 68      (inconclusive)
http://cpa.baidusd2016.com/.../install1213087.exe  (ee1187c3d941e8279434aee43ed4c33c)

0 / 68
http://cpa.baidusd2016.com/.../qqpcmgr_v10.10.16434.218_45080_Silence.exe  (0f4acb961053571da475a60c7ea60e56)

0 / 68
http://cpa.baidusd2016.com/.../qqpcmgr_v10.11.16588.235_72791_Silence.exe  (c423b5037e686c53505b066c34f42c47)

0 / 68
http://cpa.baidusd2016.com/.../qqpcmgr_v10.11.16588.235_72794_Silence.exe  (85177e79a802d55e46713bbc26d6acc7)

0 / 68
http://cpa.baidusd2016.com/.../install1912289.exe  (c3f36a7b626b0833a4aca45aeb844f26)

0 / 68
http://cpa.baidusd2016.com/.../SoHuVA_4.2.0.16-c20762-ng-nti-s-tp-x.exe  (sohuva_y-c206525652-s-nsi-tp-x.exe)

The following file have been seen to comunicate with cpa.baidusd2016.com in live environments.

TCP » 94.242.228.117:80
setup.exe (MultiDesk)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.