» dl.it376.com
Overview
IPs Addresses (5)
Downloads (3)
Network (31)
Website Detail
Related Domains (16)

dl.it376.com

xiao jie

Domain Information

The domain dl.it376.com registered by xiao jie was initially registered in July of 2014 through DOMAIN NAME NETWORK PTY LTD. The hosted servers are located in Guangzhou, Guangdong within China which resides on the Asia Pacific Network Information Centre network.

Registrant:

xiao jie

Registrar:

DOMAIN NAME NETWORK PTY LTD

Server location:

Guangdong, China (CN)

Create date:

Thursday, July 17, 2014

Expires date:

Monday, July 17, 2017

Updated date:

Thursday, January 8, 2015

ASN:

AS58466 CT-GUANGZHOU-IDC CHINANET Guangdong province network,CN

Root domain:

it376.com

Whois:

1 it376.com record

Google Safe Browsing:

unwanted

Scan engine

Details

Detections

McAfee

Artemis!75CCA7BDF42A

33.33%

avast!

Win32:Rootkit-gen [Rtk]

33.33%

Clam AntiVirus

Win.Trojan.691128

33.33%

Fortinet FortiGate

Riskware/Generic.AC.18053

33.33%

Reason Heuristics

PUP.Yantai (L)

33.33%

ESET NOD32

Win32/RiskWare.Yantai.A application

33.33%

The domain dl.it376.com has been seen to resolve to the following 5 IP addresses.

May 17, 2016

May 17, 2016

May 17, 2016

February 23, 2016

February 23, 2016

File downloads found at URLs served by dl.it376.com.

1 / 68 (PUP)

http://dl.it376.com/down.php?sid=412 (setup_479.exe)

1 / 68 (inconclusive)

http://dl.it376.com/down.php?sid=412 (高清版_412.exe)

4 / 68 (inconclusive)

http://dl.it376.com/down.php?sid=412 (setup_357.exe)

The following 31 files have been seen to comunicate with dl.it376.com in live environments.

TCP » 125.88.65.249:80

piao_5.2.0.50.crx

TCP » 125.88.65.249:80

piao.crx

TCP » 183.56.172.10:80

life_assistant.crx

TCP » 183.56.172.10:80

leidian.crx

TCP » 183.56.172.10:80

music.crx

TCP » 183.56.172.10:80

novel.crx

TCP » 183.56.172.10:80

life_assistant.crx

TCP » 183.56.172.10:80

leidian.crx

TCP » 183.56.172.10:80

shipin.crx

TCP » 183.56.172.10:80

music.crx

TCP » 183.56.172.10:80

novel.crx

TCP » 183.56.172.10:80

leidian.crx

TCP » 183.56.172.10:80

ejmoceoaphoacojefmkhmfbgkidaefdl.crx

TCP » 183.56.172.10:80

live_assist.crx

TCP » 183.56.172.229:80

piao_5.2.0.32.crx

TCP » 183.56.172.229:80

piao.crx

TCP » 183.56.172.229:80

piao.crx

TCP » 183.56.172.229:80

fqb.crx

TCP » 183.56.172.229:80

fvddownloader_2.1.1.crx

TCP » 183.56.172.229:80

cortica_addon_3.2.0.88.crx

Latest 20 of 31 files

URL:

http://dl.it376.com/

Title:

“dl”

Web server:

nginx

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.