» www.xiazaiba.com
Overview
Analysis
IPs Addresses (13)
Downloads (28)
Website Detail
Statistics
Related Domains (1)

www.xiazaiba.com

Guangdong ivali network science and technology Crop.,Ltd

Domain Information

The domain www.xiazaiba.com registered by Guangdong ivali network science and technology Crop.,Ltd was initially registered in March of 2008 through GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Haikou, Hainan within China which resides on the Asia Pacific Network Information Centre network.

Registrant:

Guangdong ivali network science and technology Crop.,Ltd

Registrar:

ENAME TECHNOLOGY CO., LTD.

Server location:

Hainan, China (CN)

Create date:

Wednesday, March 5, 2008

Expires date:

Sunday, March 5, 2017

Updated date:

Monday, June 8, 2015

ASN:

AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN

Root domain:

xiazaiba.com

Whois:

2 xiazaiba.com records

Scanner detections:

Detections (59% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ShanghaiGaoxinComputerSystemColtd.I, PUP.TopTools (M), Adware.Eszjuxuan, PUP.Bundler (L), PUP.Shanghai.Installer (M)

50.00%

IKARUS anti.virus

Trojan.ATRAPS5, Trojan.Win32.Pincav, Trojan-Downloader, Trojan.Win32.Skeeyah, Trojan.SuspectCRC, PUA.Eszjuxuan

33.33%

McAfee

Artemis!4647680C223D, Artemis!72CA53DE9185, Artemis!B00C86F002C5, Artemis!D0C117079894, Artemis!578DFB836D38

27.78%

Dr.Web

Adware.Downware.6307, Adware.WDJiange.1, Program.Unwanted.432, Adware.TopTools.20, Adware.TopTools.41

27.78%

avast!

Win32:Trojan-gen, Win32:Evo-gen [Susp], Win32:Malware-gen, Win32:Adware-gen [Adw]

22.22%

G Data

Win32.Trojan.Agent.TMWDA0, Win32.Adware.FlyStudio, Win32.Application.Agent.P6KQ1B, Gen:Variant.Adware.Razy.63718

22.22%

Comodo Security

TrojWare.Win32.TrojanDropper.Agent.HNMS, UnclassifiedMalware, Application.Win32.MeinV.AK

16.67%

AVG

Generic, Generic7

16.67%

Baidu Antivirus

Win32.Adware.Eszjuxuan

16.67%

Malwarebytes

PUP.Optional.Chad, PUP.Optional.Chinad.C

11.11%

F-Prot

W32/SelfStarterInternetTrojan!M, W32/Agent.EW.gen

11.11%

Trend Micro House Call

TROJ_GEN.F47V0118, Suspicious_GEN.F47V0401

11.11%

Sophos

Mal/Emogen-F, Install Core Click run software (PUA)

11.11%

VIPRE Antivirus

Trojan.Win32.Generic, Adware.Agent

11.11%

Kaspersky

Trojan.Win32.Pincav, not-a-virus:AdWare.Win32.Agent

11.11%

The domain www.xiazaiba.com has been seen to resolve to the following 13 IP addresses.

July 24, 2016

July 24, 2016

August 13, 2015

August 13, 2015

August 13, 2015

August 13, 2015

August 13, 2015

August 13, 2015

August 13, 2015

April 16, 2014

April 16, 2014

April 16, 2014

April 16, 2014

File downloads found at URLs served by www.xiazaiba.com.

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jqjb&g=aHR0cDovL3d3dy5iYWR1cXEuY29tL2Rvd25sb2FkL3NldHVwXzEwMDYuZXhl (setup_1006.exe)

1 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MTE1 (setup_130trm.exe)

1 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=AGRbblBu&g=aHR0cDovL3ZpcC5kbnMtdmlwLm5ldC9kb3duLmFzcD9pZD00MjE= (setup_033.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat&g=aHR0cDovL3hpYXphaS5rdWdvdS5jb20vQ29ycC9rdWdvdTdfMzY4MC5leGU= (kugou7_3680.exe)

13 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MjYy (setup_262zz6.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat&g=aHR0cDovL2Rvd24ua3V3by5jbi9tYm94L2t1d29fam0zNTQuZXhl (kuwo_jm417.exe)

1 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jik9&g=aHR0cDovL2luaS5saXRpbmd4aW4uY24vaGV6aS9xaC9zZXR1cF94aWF6YWliYS0xOTAxLnBocA== (qqpcdownload78218.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat&g=aHR0cDovL3RyaWFsczMuYWRvYmUuY29tL0Fkb2JlUHJvZHVjdHMvQVVEVC80L3dpbjMyL0F1ZGl0aW9uXzRfTFM3LmV4ZQ== (audition_4_ls7.exe)

1 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MTE1 (douxie_033ic4.exe)

1 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jqz1&g=aHR0cDovL2RsLml0Mzc2LmNvbS9kb3duLnBocD9zaWQ9NDc5 (qqpcdownload78218.exe)

6 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jqz1&g=aHR0cDovL2RsLml0Mzc2LmNvbS9kb3duLnBocD9zaWQ9NDc5 (game_358op3j.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jikw&g=aHR0cDovL3cueC5iYWlkdS5jb20vZ28vbWluaS8yLzMxMTkzIA== (hkwst_31193.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jikw&g=aHR0cDovL3cueC5iYWlkdS5jb20vZ28vbWluaS8yLzMxMTkzIA== (qxlqb_31193.exe)

5 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MjYy (game_284zy9.exe)

3 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MjYy (setup_266lf2.exe)

1 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MTE1 (newyx_045ro0.exe)

4 / 68 (inconclusive)

http://www.xiazaiba.com/.../aWQ9Mzk4MQ== (setup_2499x.exe)

8 / 68 (Malware)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jikd&g=aHR0cDovL2tpbmJlc3QuY24vdHQucGhwP3U9YUhSMGNEb3ZMekV5TlRFeE9EUXlNREV1WTJSdUxtMTVjV05zYjNWa0xtTnZiUzh4TWpVeE1UZzBNakF4TDJSdmQyNXNiMkZrTDFObGRIVndYekkwTkRndVpYaGw= (setup_1292[x].exe)

16 / 68 (PUP)

http://www.xiazaiba.com/.../c2lkPTMx (setup_hh-0324.exe)

10 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jini&g=aHR0cDovL2FkLjAwZG93bi5jb20vcmQuYXNweD9pZD01NA== (newyx_1_51832_045.exe)

3 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jik4&g=aHR0cDovL2luaS5saXRpbmd4aW4uY24vaGV6aS9xaC9zZXR1cF94aWF6YWliYS0xOTAwLnBocA== (setup_xiazaiba-1900_884.exe)

1 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jik9&g=aHR0cDovL2luaS5saXRpbmd4aW4uY24vaGV6aS9xaC9zZXR1cF94aWF6YWliYS0xOTAxLnBocA== (高清版_xiamp4-1490_14d.exe)

1 / 68 (PUP)

http://www.xiazaiba.com/.../aWQ9MTE1 (setup_060g8r.exe)

5 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=A2cPPQcx&g=aHR0cDovL2RsLnF4aWF6YWkuY29tL2Rvd24ucGhwP3NpZD02MA== (setup_50.exe)

0 / 68

http://www.xiazaiba.com/download.php?softid=64&softname=????????2015 (phraseexpress_25297_0.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=jqjw&g=aHR0cDovL2R3LjkxeS5jb20vOTF5TG9iYnktMjUtMTE4LmV4ZQ== (91ylobby-25-118.exe)

8 / 68 (PUP)

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=BWEIPQY4&g=aHR0cDovL3hpYXphaS52c3RhcnRkb3duLmNvbS9kb3duLmFzcD9pZD00MjE= (setup421.exe)

0 / 68

http://www.xiazaiba.com/route.php?ct=stat&ac=stat_ads&id=A2QLMwEy&g=aHR0cDovL3d3dy51aWJpYS5jb20vamttc2V0dXAuZXhl (jkmsetup.exe)

URL:

http://www.xiazaiba.com/

Title:

“ذվ_ṩȫ,ֻ,ֻϷ,Ϸط!_ɫذ”

Web server:

DnionOS/1.2.1.12 (PHP/5.5.27)

Facebook:

Likes: 10

Shares: 84

Comments: 7

Statistics are for the previous month.

Related Domains

ddimg.cn

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.