home

img.phone.baidu.com

Beijing Baidu Netcom Science Technology Co., Ltd.

Domain Information

The domain img.phone.baidu.com registered by Beijing Baidu Netcom Science Technology Co., Ltd. was initially registered in October of 1999 through MARKMONITOR INC.. The hosted servers are located in Warsaw, Mazowieckie within Poland which resides on the Akamai Technologies, Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
Mazowieckie, Poland (PL)

Create date:
Monday, October 11, 1999

Expires date:
Wednesday, October 11, 2017

Updated date:
Thursday, September 10, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V., US

Root domain:
baidu.com

Whois:
1 baidu.com record

The domain img.phone.baidu.com has been seen to resolve to the following 2 IP addresses.

104.96.220.147
a104-96-220-147.deploy.static.akamaitechnologies.com
August 31, 2016

104.96.220.130
a104-96-220-130.deploy.static.akamaitechnologies.com
August 31, 2016

File downloads found at URLs served by img.phone.baidu.com.

0 / 68
http://img.phone.baidu.com/public/uploads/store_0/a/a/.../aabe02d73855750a941ef691657cf2b8.webp  (46ba4fadf161b842adc8ca6d36f5d668)

The following 10 files have been seen to comunicate with img.phone.baidu.com in live environments.

TCP » 104.96.220.130:80
kometa.exe (Kometa by Kometa Authors)

TCP » 104.96.220.147:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.147:443
kometa.exe (Kometa by Kometa Authors)

TCP » 104.96.220.130:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.130:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.147:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.147:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 104.96.220.147:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.130:443
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 104.96.220.130:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.130:80
plugin.exe

TCP » 104.96.220.147:80
lpinlneaahaidmfmllckjkfhcdoliifh.crx

TCP » 104.96.220.147:80
plugincontainer.exe

URL:
http://img.phone.baidu.com/

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.