home

hitlet.ru

Private Person  (Proxy Registrant)

Domain Information

The domain hitlet.ru is registered by proxy through REGRU-RU and was originally registered in January of 2016. The hosted servers are located in Paris, Ile-De-France within France which resides on the RIPE Network Coordination Centre network.
Registrar:
REGRU-RU

Server location:
Ile-De-France, France (FR)

Create date:
Monday, January 18, 2016

Expires date:
Wednesday, January 18, 2017

ASN:
AS12876 AS12876 ONLINE S.A.S.,FR

Whois:
1 hitlet.ru record

The domain hitlet.ru has been seen to resolve to the following 2 IP addresses.

62.210.6.44
bin.kometa-software.ru
April 18, 2016

62.210.6.46
62-210-6-46.rev.poneytelecom.eu
April 18, 2016

File downloads found at URLs served by hitlet.ru.

4 / 68      (PUP)
http://hitlet.ru/prestrm.exe  (ed2076901302a9ccf87d5c14a2e7b401)

0 / 68
http://hitlet.ru/prestrm.dll  (3ea53b92771bb0be32984bda39cf7eb5)

3 / 68      (PUP)
http://hitlet.ru/prestrm.exe  (dd097d6612c084a2a89e2750571ba96a)

0 / 68
http://hitlet.ru/prestrm.dll  (cae6c95540c1ccbf272b236fde09aec4)

0 / 68
http://hitlet.ru/prestrm.dll  (3d5de779854d21382b9b50ddaaa7bc13)

2 / 68      (PUP)
http://hitlet.ru/prestrm.exe  (c695f38d344e7eef0734b6068ffcc707)

1 / 68
http://hitlet.ru/prestrm.dll  (c517a2aa29ad217642c2f4d31e3d58e2)

The following 13 files have been seen to comunicate with hitlet.ru in live environments.

TCP » 62.210.6.44:80
ext404.crx

TCP » 62.210.6.44:80
closedtabs.crx

TCP » 62.210.6.44:80
speeddial.crx

TCP » 62.210.6.44:80
closedtabs.crx

TCP » 62.210.6.44:80
malware.crx

TCP » 62.210.6.44:80
metasearch.crx

TCP » 62.210.6.44:80
metasearch.crx

TCP » 62.210.6.44:80
notification.crx

TCP » 62.210.6.46:80
speeddial.crx

TCP » 62.210.6.46:80
closedtabs.crx

TCP » 62.210.6.46:80
notification.crx

TCP » 62.210.6.46:80
searchsettings.crx

TCP » 62.210.6.46:80
metasearch.crx

browser4update.ru

kometa-browser.ru

kometa-software.ru

robyego.ru

kometa-panel.ru

kometa-start.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.