home

download.alipay.com

Alipay.com Co., Ltd.(支付宝(中国)网络技术有限公司)

Domain Information

The domain download.alipay.com registered by Alipay.com Co., Ltd.(支付宝(中国)网络技术有限公司) was initially registered in October of 2004 through MARKMONITOR INC.. The hosted servers are located in Hangzhou, Zhejiang within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
MARKMONITOR INC.

Server location:
Zhejiang, China (CN)

Create date:
Friday, October 8, 2004

Expires date:
Saturday, October 8, 2016

Updated date:
Monday, October 21, 2013

ASN:
AS37963 CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.,Ltd., CN

Root domain:
alipay.com

Whois:
1 alipay.com record

The domain download.alipay.com has been seen to resolve to the following 8 IP addresses.

110.76.6.85
June 29, 2016

110.75.158.85
host-85.alipay.com
June 29, 2016

110.76.19.22
February 28, 2016

110.76.20.22
May 5, 2015

110.75.143.22
host-22.alipay.com
August 22, 2014

110.75.137.201
host-201.alipay.com
January 14, 2014

110.75.137.22
host-22.alipay.com
January 14, 2014

110.75.157.22
host-22.alipay.com
December 18, 2013

File downloads found at URLs served by download.alipay.com.

0 / 68
https://download.alipay.com/sec/.../aliedit.exe  (e8c92ca1016f42004b7362e24d15cad9)

0 / 68
http://download.alipay.com/sec/.../alipaydownloader.exe  (cfd6780c36277ae1bb7ab2fa35568c75)

2 / 68
http://download.alipay.com/sec/.../aliedit.exe  (7a17e12df6e0e4c79bb99734ccd6fc84)

3 / 68
https://download.alipay.com/sec/.../alicert.exe  (0cee727637a26110f220cf23a8d0fa8c)

3 / 68
https://download.alipay.com/ukey/.../alicert.exe  (aliedit.exe)

0 / 68
https://download.alipay.com/sec/.../alicreset.exe  (f9c5d46fff4099157bce22c9c4c261c0)

The following file have been seen to comunicate with download.alipay.com in live environments.

TCP » 110.75.158.85:443
UCBrowser.exe (by UCWeb)

URL:
http://download.alipay.com/

SSL certificate subject:
CN=*.alipay.com, OU=Operations Department, O="Alipay.com Co.,Ltd", L=HANGZHOU, S=ZHEJIANG, C=CN

SSL certificate issuer:
CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Web server:
Tengine/2.1.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.