home

downloadaixeechahgho.com

FIRSERIA, S.L.

Domain Information

The domain downloadaixeechahgho.com registered by China Capital Investment Limited was initially registered in December of 2015 through GODADDY.COM, LLC. This domain has been seen distributing various forms of adware (some being very aggressive) directly or via bundled installations. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network. The domain is associated with the publisher FIRSERIA, S.L. who is located in Badalona, Barcelona in Spain.
Registrar:
INTERWEB ADVERTISING D.B.A. PROFILE BUILDER

Server location:
Arizona, United States (US)

Create date:
Tuesday, December 1, 2015

Expires date:
Thursday, December 1, 2016

Updated date:
Tuesday, December 1, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Whois:
3 downloadaixeechahgho.com records

The domain downloadaixeechahgho.com has been seen to resolve to the following 5 IP addresses.

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
June 23, 2016

185.53.179.7
May 16, 2016

104.130.124.96
April 3, 2016

50.56.218.189
50-56-218-189.static.cloud-ips.com
January 27, 2016

184.168.221.45
ip-184-168-221-45.ip.secureserver.net
May 1, 2014

The following 371 files have been seen to comunicate with downloadaixeechahgho.com in live environments.

TCP » 184.168.221.45:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.45:80
cineplus-2.8.dv16.11-codedownloader.exe (CinePlus-2.8.dV16.11 by CiPlus2.8gV16.11)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 184.168.221.45:80
app lid-codedownloader.exe (App Lid by Lid)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 184.168.221.45:80
a5e63233-bead-40fe-80f4-f7e727ff5a13-11.exe (App Lid by Lid)

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

 
Latest 20 of 377 files

May 1, 2014
dl.downloadaixeechahgho.com

URL:
http://downloadaixeechahgho.com/

Web server:
nginx/1.8.1

winportal.com

descargargratis.com

downloadmr.com

socdn.com

pc-file.info

download366.com

download-best-games.com

win-install.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.