down.meiheitou.com
yang yang
Domain Information
The domain down.meiheitou.com registered by yang yang was initially registered in October of 2012 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chengdu, Sichuan within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
GODADDY.COM, LLC
Server location:
Sichuan, China (CN)
Create date:
Friday, October 19, 2012
Expires date:
Wednesday, October 19, 2016
Updated date:
Monday, October 20, 2014
ASN:
AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN
Google Safe Browsing:
unwanted
Scanner detections:
Detections (57% detected)
Scan engine
Details
Detections
Vba32 AntiVirus
Signed-Adware.Hao123.BaiduBeijingCo
85.71%
Rising Antivirus
PE:Trojan.Win32.Generic.177C8130!394035504, PE:Trojan.Win32.Generic.173B1DCB!389750219, PE:Trojan.Win32.Generic.1754AEC4!391425732
57.14%
Trend Micro House Call
Suspicious_GEN.F47V0623, Suspicious_GEN.F47V1028, Suspici.F6E93178
42.86%
NANO AntiVirus
Trojan.Win32.Rogue.ctojyu, Trojan.Win32.Conduit.dfemlz
42.86%
McAfee
Artemis!362EE85552E2, Artemis!A56A8DC23870, Artemis!31220CC65829
42.86%
VIPRE Antivirus
Trojan.Win32.Generic!SB.0
28.57%
IKARUS anti.virus
PUA.AdGazelle, Trojan.NSIS.StartPage
28.57%
Qihoo 360 Security
Trojan.Generic
28.57%
ESET NOD32
Win32/FlyStudio.Packed.AD (variant)
14.29%
Baidu Antivirus
Trojan.Win32.FlyStudio.BPacked
14.29%
AegisLab AV Signature
DangerousObject.Multi.Gen
14.29%
Reason Heuristics
PUP.Downloader
14.29%
herdProtect (fuzzy)
a variant of 1aceee1c43c2b35ebc6609813ff772af6f8186cf
14.29%
The domain down.meiheitou.com has been seen to resolve to the following 4 IP addresses.
171.104.167.220.dial.dy.sc.dynamic.163data.com.cn
May 6, 2015
69.174.236.221.broad.ls.sc.dynamic.163data.com.cn
November 13, 2014
File downloads found at URLs served by down.meiheitou.com.
URL:
http://down.meiheitou.com/
Related Domains
