» ini.pinguopai.cn
Overview
Analysis
IPs Addresses (2)
Downloads (8)
Related Domains (9)

ini.pinguopai.cn

Domain Information

Server location:

Guangdong, China (CN)

ASN:

AS17816 CHINA169-GZ China Unicom IP network China169 Guangdong province, CN

Root domain:

Scanner detections:

Detections (57% detected)

Scan engine

Details

Detections

IKARUS anti.virus

Trojan.Win32.Skeeyah

80.00%

Reason Heuristics

PUP.Bundler (L)

80.00%

Zillya! Antivirus

Adware.Agent.Win32.84769

60.00%

AegisLab AV Signature

AdWare.W32.Agent

60.00%

avast!

Win32:Malware-gen

20.00%

The domain ini.pinguopai.cn has been seen to resolve to the following 2 IP addresses.

July 17, 2016

April 19, 2016

File downloads found at URLs served by ini.pinguopai.cn.

1 / 68 (PUP)

http://ini.pinguopai.cn/hezi/.../setup_loldytt.php (setup_52pk-1481_oqu.exe)

4 / 68 (PUP)

http://ini.pinguopai.cn/hezi/.../setup_loldytt-HD.php (setup_sdbeta_nwc.exe)

3 / 68 (inconclusive)

http://ini.pinguopai.cn/hezi/.../setup_xx0626.php (f_00100e)

4 / 68 (PUP)

http://ini.pinguopai.cn/hezi/.../setup_loldytt.php (setup_qw1023_3qc.exe)

0 / 68

http://ini.pinguopai.cn/hezi/.../setup_52pk-1481.php (setup_z831_t6k.exe)

3 / 68 (PUP)

http://ini.pinguopai.cn/hezi/.../setup_loldytt-HD.php (setup_xiazaiba-1900_884.exe)

0 / 68

http://ini.pinguopai.cn/hezi/.../setup_loldytt.php (setup_xiazaiba-1901_pti.exe)

4 / 68 (PUP)

http://ini.pinguopai.cn/hezi/.../setup_loldytt.php (setup_sdbeta_nwc.exe)

Related Domains

jianzhuzheng.cn

qdpichaiyuan.cn

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.