home

link.rollex11.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain link.rollex11.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2013. The hosted servers are located in New York City, New York within the United States which resides on the Internet Media Network network.
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Wednesday, August 28, 2013

Expires date:
Sunday, August 28, 2016

Updated date:
Monday, September 9, 2013

ASN:
AS12008 ULTRADNS - NeuStar, Inc.

Root domain:
rollex11.com

Whois:
1 rollex11.com record

The domain link.rollex11.com has been seen to resolve to the following 12 IP addresses.

66.114.52.17
July 6, 2016

66.114.52.16
July 6, 2016

174.35.27.76
June 29, 2016

66.114.52.14
April 12, 2016

66.114.52.9
April 12, 2016

66.114.52.10
February 7, 2016

174.35.27.75
February 7, 2016

174.35.27.77
December 17, 2015

66.114.52.20
December 17, 2015

66.114.52.7
November 7, 2015

66.114.52.15
November 7, 2015

204.74.99.100
crs.ultradns.net
May 6, 2015

File downloads found at URLs served by link.rollex11.com.

0 / 68
http://link.rollex11.com/  (setupglx.exe)

0 / 68
http://link.rollex11.com/  (setup.exe)

1 / 68
http://link.rollex11.com/  (rollex_ml.exe)

4 / 68      (inconclusive)
http://link.rollex11.com/  (31232_rollex_en.exe)

9 / 68      (Malware)
http://link.rollex11.com/  (setupglx.exe)

0 / 68
http://link.rollex11.com./  (setupglx.exe)

40 / 68    (Infected)
http://link.rollex11.com/  (setupglx.exe)

0 / 68
http://link.rollex11.com/  (setupglx.exe)

0 / 68
http://link.rollex11.com/  (setupglx.exe)

The following 50 files have been seen to comunicate with link.rollex11.com in live environments.

TCP » 66.114.52.14:80
1468567241.exe

TCP » 66.114.52.9:80
1468567241.exe

TCP » 66.114.52.15:80
1468567241.exe

TCP » 66.114.52.16:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
1468567241.exe

TCP » 66.114.52.16:80
1468567241.exe

TCP » 66.114.52.7:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.16:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.20:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 204.74.99.100:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.17:80
1468567241.exe

TCP » 66.114.52.10:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.17:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 204.74.99.100:80
wikithemes.exe

TCP » 174.35.27.76:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.20:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.20:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 204.74.99.100:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.9:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 204.74.99.100:80
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 224 files

URL:
http://link.rollex11.com/

Web server:
v/2.9.0/2.8.1/v6iad1-www

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.