» xiazai.3lsoft.com
Overview
IPs Addresses (3)
Downloads (2)
Network (12)
Website Detail
Statistics
Related Domains (12)

xiazai.3lsoft.com

Song Li

Domain Information

The domain xiazai.3lsoft.com registered by Song Li was initially registered in January of 2012 through ENAME TECHNOLOGY CO., LTD.. The hosted servers are located in Beijing, Beijing within China which resides on the Asia Pacific Network Information Centre network.

Registrant:

Song Li

Registrar:

ENAME TECHNOLOGY CO., LTD.

Server location:

Beijing, China (CN)

Create date:

Thursday, January 12, 2012

Expires date:

Thursday, January 12, 2017

Updated date:

Tuesday, January 21, 2014

ASN:

AS54994 QUANTIL - QUANTIL, INC, US

Root domain:

3lsoft.com

Whois:

1 3lsoft.com record

The domain xiazai.3lsoft.com has been seen to resolve to the following 3 IP addresses.

203.130.53.126

203.130.53.126-BJ-CNC

June 21, 2016

38.125.163.141

May 1, 2014

38.125.163.139

May 1, 2014

File downloads found at URLs served by xiazai.3lsoft.com.

1 / 68 (PUP)

http://xiazai.3lsoft.com:81/.../setup_a165.exe (d56858a8820158929fe461a85ea12d53)

0 / 68

http://xiazai.3lsoft.com:81/.../setup.exe (bc4b274815b2f8872f5f1f91f32fea92)

The following 12 files have been seen to comunicate with xiazai.3lsoft.com in live environments.

TCP » 203.130.53.126:80

update.exe (KzUpdate)

TCP » 203.130.53.126:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 203.130.53.126:80

UpdateChecker.exe (UpdateChecker.exe)

TCP » 203.130.53.126:80

UCBrowser.exe (by UCWeb)

TCP » 203.130.53.126:80

jingling.exe

TCP » 203.130.53.126:80

jingling.exe

TCP » 203.130.53.126:80

jingling.exe

TCP » 203.130.53.126:80

pptvsetup_3.1.4.0025.exe (PPTV by PPLive)

TCP » 203.130.53.126:80

extension.crx

TCP » 203.130.53.126:80

VStart.exe

TCP » 203.130.53.126:80

online-guardian-v2.0.9.exe

TCP » 203.130.53.126:80

KZReport.exe (by Kuaizip Compression software)

URL:

http://xiazai.3lsoft.com/

Web server:

Microsoft-IIS/7.5

Twitter:

Shares: 2

Statistics are for the previous month.

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.