home

dw1.html.it

HTML.it srl

Domain Information

The hosted servers are located in Arezzo, Toscana within Italy which resides on the RIPE Network Coordination Centre network.
Server location:
Toscana, Italy (IT)

ASN:
AS31034 ARUBA-ASN Aruba S.p.A.,IT

Root domain:
html.it

Whois:
1 html.it record

The domain dw1.html.it has been seen to resolve to the following IP address.

46.37.29.204
host204-29-37-46.serverdedicati.aruba.it
June 26, 2016

File downloads found at URLs served by dw1.html.it.

0 / 68
http://dw1.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1342550060&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==  (avast-antivirus.exe)

0 / 68
http://dw1.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1342030388&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==  (avast-antivirus.exe)

0 / 68
http://dw1.html.it/index.php?softname=avg_free_stb_all_2012_2180_htmlit.exe&code=1340449579&q=OTc5MnxhdmctYW50aS12aXJ1cy1mcmVlLWVkaXRpb24=  (avg_free_stb_all_2012_2180_cnet.exe)

The following file have been seen to comunicate with dw1.html.it in live environments.

TCP » 46.37.29.204:80
acengine.exe (acengine.exe by Abengine)

URL:
http://dw1.html.it/

SSL certificate subject:
CN=*.html.it, OU=EssentialSSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Apache/2.4.6 (CentOS) PHP/5.4.16

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.