home

link.s8star.com

ID Domain Privacy Network - iDDP.Net

Domain Information

The domain link.s8star.com registered by ID Domain Privacy Network - iDDP.Net was initially registered in December of 2014 through 1 API GMBH. Currently this domain has been known to host various forms of malware. The hosted servers are located in Canyon Lake, Texas within the United States which resides on the BitGravity, Inc. network.
Registrar:
1 API GMBH

Server location:
Texas, United States (US)

Create date:
Thursday, December 4, 2014

Expires date:
Monday, December 4, 2017

Updated date:
Friday, November 13, 2015

ASN:
AS40009 BITGRAVITY - BitGravity, Inc.,US

Root domain:
s8star.com

Whois:
1 s8star.com record

Scanner detections:
Malware distribution  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
75.00%

Dr.Web
Trojan.DownLoader13.6370
50.00%

K7 AntiVirus
Riskware
25.00%

Clam AntiVirus
Win.Trojan.Neobar-1
25.00%

ESET NOD32
Detection.Undefined
25.00%

avast!
Win32:Malware-gen
25.00%

The domain link.s8star.com has been seen to resolve to the following 2 IP addresses.

64.185.181.238
pc-b.bitgravity.com
May 20, 2016

204.74.99.100
crs.ultradns.net
January 31, 2016

File downloads found at URLs served by link.s8star.com.

1 / 68      (inconclusive)
http://link.s8star.com/  (setup.exe)

2 / 68      (Malware)
http://link.s8star.com/  (setup.exe)

4 / 68      (Malware)
http://link.s8star.com/  (setup.exe)

2 / 68      (Malware)
http://link.s8star.com/  (setup.exe)

The following 86 files have been seen to comunicate with link.s8star.com in live environments.

TCP » 64.185.181.238:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:80
winguard_x64.exe

TCP » 64.185.181.238:80
operasetup.exe (Opera Installer by Opera Software)

TCP » 64.185.181.238:80
operasetup.exe (Opera Installer by Opera Software)

TCP » 64.185.181.238:80
operasetup.exe (Opera Installer by Opera Software)

TCP » 64.185.181.238:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 64.185.181.238:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:80
rmup.exe

TCP » 64.185.181.238:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:443
SoftMaster.exe

TCP » 64.185.181.238:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:443
PCMaster.exe

TCP » 64.185.181.238:80
PCMaster.exe

TCP » 64.185.181.238:80
whatsapptime.exe

TCP » 204.74.99.100:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 64.185.181.238:443
PCMaster.exe

TCP » 204.74.99.100:80
wikithemes.exe

 
Latest 20 of 101 files

URL:
http://link.s8star.com/

Web server:
v/2.9.0/2.8.1/v4iad1-www

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.