home

g2a5c.s92.it

MailUp.spa

Domain Information

The hosted servers are located in San Jose, California within the United States which resides on the CDNetworks Inc. network.
Server location:
California, United States (US)

Root domain:
s92.it

Whois:
1 s92.it record

The domain g2a5c.s92.it has been seen to resolve to the following 2 IP addresses.

174.35.73.104
June 2, 2016

174.35.73.93
June 2, 2016

File downloads found at URLs served by g2a5c.s92.it.

0 / 68
http://g2a5c.s92.it/.../download.aspx?file=export-14.zip,e,1  (1f9bb4c86561dd7df85454f9738a208d)

0 / 68
http://g2a5c.s92.it/.../download.aspx?file=export-15.zip,e,1  (f062d302e4adef9c907b681e721b83b0)

0 / 68
http://g2a5c.s92.it/.../download.aspx?file=export-16.zip,e,1  (db6811121472318f746ae44f30129bcf)

The following 11 files have been seen to comunicate with g2a5c.s92.it in live environments.

TCP » 174.35.73.104:80
smelled.exe (Smelled)

TCP » 174.35.73.104:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.104:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.93:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.93:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.73.104:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 174.35.73.104:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.73.93:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 174.35.73.104:80
1468567241.exe

TCP » 174.35.73.93:80
{6ae11fc7-5aaf-401c-8438-ef3bbc2bb80b}.exe (toolmini Application)

TCP » 174.35.73.104:80
kmplayer_3-8-0-122.exe (The KMPlayer by PandoraTV)

TCP » 174.35.73.104:80
kmplayer-3.7.0.109-6295.exe

TCP » 174.35.73.93:80
kmplayer_3-8-0-120.exe (The KMPlayer by PandoraTV)

TCP » 174.35.73.93:80
UCBrowser.exe (UC Browser by UCWeb)

URL:
http://g2a5c.s92.it/

Google Analytics:
UA-48148203

Title:
“Web based Newsletter Manager”

Web server:
PWS/8.1.36 (ASP.NET) (Version: 4.0.30319)

s43.it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.