home

down.yunzhuan.com

Xiamen two five eight Group Co., Ltd.

Domain Information

The domain down.yunzhuan.com registered by Xiamen two five eight Group Co., Ltd. was initially registered in November of 2009 through ONLINENIC, INC.. The hosted servers are located in Ashburn, Virginia within the United States which resides on the NTT America, Inc. network.
Registrar:
ONLINENIC, INC.

Server location:
Virginia, United States (US)

Create date:
Tuesday, November 3, 2009

Expires date:
Thursday, November 3, 2016

Updated date:
Wednesday, November 4, 2015

ASN:
AS2914 NTT-COMMUNICATIONS-2914 - NTT America, Inc.,US

Root domain:
yunzhuan.com

Whois:
1 yunzhuan.com record

The domain down.yunzhuan.com has been seen to resolve to the following IP address.

165.254.60.146
firewall.systemarts.com
July 4, 2016

File downloads found at URLs served by down.yunzhuan.com.

0 / 68
http://down.yunzhuan.com/.../comiccity.exe  (ababfed71ae3a242a4112a86a3240bbd)

The following 8 files have been seen to comunicate with down.yunzhuan.com in live environments.

TCP » 165.254.60.146:80
jingling.exe

TCP » 165.254.60.146:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 165.254.60.146:443
jingling.exe

TCP » 165.254.60.146:443
jingling.exe

TCP » 165.254.60.146:80
jingling.exe

TCP » 165.254.60.146:80
jingling.exe

TCP » 165.254.60.146:80
-¸-+¦ª-¸-+¦µ.exe (liuliangbao by www.liuliangbao.cn)

TCP » 165.254.60.146:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 165.254.60.146:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://down.yunzhuan.com/

Web server:
marco/0.14.0

3c-automation.com.cn

5ewin.com

cmaxgrc.com

finereport.com

jxsjixie.com

ksbao.com

pcsoftdown.com

upaiyun.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.