» khantabib.waphall.com
Overview
IPs Addresses (2)
Downloads (2)
Network (10)
Related Domains (18)

khantabib.waphall.com

Povilas Musteikis

Domain Information

The domain khantabib.waphall.com registered by Povilas Musteikis was initially registered in July of 2009 through GODADDY.COM, LLC. The hosted servers are located in Rotterdam, Zuid-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.

Registrant:

Povilas Musteikis

Registrar:

GODADDY.COM, LLC

Server location:

Zuid-Holland, Netherlands (NL)

Create date:

Friday, July 3, 2009

Expires date:

Monday, July 3, 2017

Updated date:

Friday, July 1, 2016

ASN:

AS57172 GLOBALLAYER Global Layer B.V.,NL

Root domain:

waphall.com

Whois:

1 waphall.com record

Google Safe Browsing:

unwanted

Scan engine

Details

Detections

Quick Heal

(Suspicious) - DNAScan

100.00%

avast!

Win32:Evo-gen [Susp]

100.00%

The domain khantabib.waphall.com has been seen to resolve to the following 2 IP addresses.

188.95.50.114

xtgem.com

July 9, 2016

188.95.50.113

xtgem.com

July 9, 2016

File downloads found at URLs served by khantabib.waphall.com.

2 / 68 (inconclusive)

http://khantabib.waphall.com/mobile flooder/.../black hacking Killer 2.exe (e05e2ca4f9c66950c6c600f898b045c0)

0 / 68

http://khantabib.waphall.com/.../All in one bot.exe (22c79bf638a8c9f29c9c149498c0ab92)

The following 10 files have been seen to comunicate with khantabib.waphall.com in live environments.

TCP » 188.95.50.114:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.113:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.113:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.113:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.114:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.114:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.114:80

messengertime.exe

TCP » 188.95.50.114:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.114:80

jingling.exe

TCP » 188.95.50.113:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 188.95.50.114:80

online-guardian-v2.0.9.exe

TCP » 188.95.50.113:80

produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 188.95.50.113:80

online-guardian-v2.0.9.exe

TCP » 188.95.50.114:80

UCBrowser.exe (UC Browser by UCWeb)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.