home

www.dl.9injector.com

PRIVACYDOTLINK CUSTOMER 973142

Domain Information

The domain www.dl.9injector.com registered by PRIVACYDOTLINK CUSTOMER 973142 was initially registered in October of 2012 through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network.
Registrar:
UNIREGISTRAR CORP

Server location:
New York, United States (US)

Create date:
Thursday, October 4, 2012

Expires date:
Wednesday, October 4, 2017

Updated date:
Saturday, March 12, 2016

ASN:
AS393406 DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc.,US

Root domain:
9injector.com

Whois:
3 9injector.com records

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Baidu Antivirus
Trojan.Win32.GameThief
100.00%

The domain www.dl.9injector.com has been seen to resolve to the following 3 IP addresses.

69.172.201.208
April 1, 2016

104.236.194.239
dl.9minecraft.net
July 16, 2015

42.112.19.85
September 5, 2014

File downloads found at URLs served by www.dl.9injector.com.

0 / 68
http://www.dl.9injector.com/index.php?act=download&id=1349863312&hash=52217303f1b56  (perx-injector.rar)

1 / 68
http://www.dl.9injector.com/index.php?act=download&id=1349881517&hash=559039643a748  (hInjector.exe)

1 / 68
http://www.dl.9injector.com/index.php?act=download&id=1349881517&hash=539c2e12a682f  (hInjector.exe)

The following 2 files have been seen to comunicate with www.dl.9injector.com in live environments.

TCP » 69.172.201.208:80
douga_dl.crx

TCP » 69.172.201.208:80
maldistream.crx

URL:
http://www.dl.9injector.com/

Web server:
DOSarrest

Facebook:
Shares:  11

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.