home

dxdown.laohuangli365.com

ZhangXiuLi

Domain Information

The domain dxdown.laohuangli365.com registered by ZhangXiuLi was initially registered in July of 2014 through ENAME TECHNOLOGY CO., LTD.. Currently this domain has been known to host various forms of malware.
Registrar:
ENAME TECHNOLOGY CO., LTD.

Create date:
Thursday, July 17, 2014

Expires date:
Monday, July 17, 2017

Updated date:
Friday, April 8, 2016

ASN:
AS9498 BBIL-AP BHARTI Airtel Ltd.,IN

Root domain:
laohuangli365.com

Whois:
1 laohuangli365.com record

Google Safe Browsing:
unwanted

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SHANGHAI.Installer (M), PUP (M)
100.00%

The domain dxdown.laohuangli365.com has been seen to resolve to the following IP address.

127.0.0.1
ReasonOne
July 11, 2016

File downloads found at URLs served by dxdown.laohuangli365.com.

1 / 68      (Malware)
http://dxdown.laohuangli365.com/cx/1510291/.../setup_2055aRRL.exe  (eb948298e7c6a2776c017a9d5cd7d1ba)

1 / 68      (Malware)
http://dxdown.laohuangli365.com/cx/15120912/.../setup_0142F6ik.exe  (d63bd0b646c00ec4a665013091e5a7fe)

1 / 68      (PUP)
http://dxdown.laohuangli365.com/cx/15120913/.../setup_1528Y2gC.exe  (124b8064102a34d6e0dbebc1736eb3d1)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.