home

h5jv8.hz5l.hz155.com

Xiong Kun

Domain Information

The domain h5jv8.hz5l.hz155.com registered by Xiong Kun was initially registered in March of 2016 through GODADDY.COM, LLC. The hosted servers are located in Nanjing, Jiangsu within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Jiangsu, China (CN)

Create date:
Thursday, March 3, 2016

Expires date:
Saturday, March 3, 2018

Updated date:
Thursday, March 3, 2016

ASN:
AS23650 CHINANET-JS-AS-AP AS Number for CHINANET jiangsu province backbone, CN

Root domain:
hz155.com

Whois:
1 hz155.com record

The domain h5jv8.hz5l.hz155.com has been seen to resolve to the following 7 IP addresses.

61.147.109.86
mailsend.qjinfo.com
June 30, 2016

61.147.108.7
June 30, 2016

218.92.227.194
May 21, 2016

218.92.216.93
May 21, 2016

122.226.188.54
May 21, 2016

61.147.108.44
May 21, 2016

218.92.227.196
May 21, 2016

File downloads found at URLs served by h5jv8.hz5l.hz155.com.

0 / 68
http://h5jv8.hz5l.hz155.com/.../diannaomoniqi.exe  (b3ac64ffd43294470aaaeac5068c94db)

1 / 68
http://h5jv8.hz5l.hz155.com/.../diannaoban.exe  (7ef2bb33d5f1bfa807f8c73cff8c0a80)

The following file have been seen to comunicate with h5jv8.hz5l.hz155.com in live environments.

TCP » 61.147.109.86:80
citrio.exe (Citrio by CatalinaGroup)

URL:
http://h5jv8.hz5l.hz155.com/

Web server:
Microsoft-IIS/7.5

az357.in

hackhome.org

pc6.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.