home

7xkq8q.com5.z0.glb.clouddn.com

Shanghai Qiniu Information Technologies Co., Ltd.

Domain Information

The domain 7xkq8q.com5.z0.glb.clouddn.com registered by Shanghai Qiniu Information Technologies Co., Ltd. was initially registered in April of 2014 through BIZCN.COM, INC.. The hosted servers are located in San Jose, California within the United States which resides on the CDNetworks Inc. network.
Registrar:
BIZCN.COM, INC.

Server location:
California, United States (US)

Create date:
Monday, April 14, 2014

Expires date:
Friday, April 14, 2017

Updated date:
Monday, November 2, 2015

ASN:
AS36408 CDNETWORKSUS-02 - CDNetworks Inc.,US

Root domain:
clouddn.com

Whois:
1 clouddn.com record

The domain 7xkq8q.com5.z0.glb.clouddn.com has been seen to resolve to the following 2 IP addresses.

66.114.52.21
June 5, 2016

66.114.52.15
June 5, 2016

File downloads found at URLs served by 7xkq8q.com5.z0.glb.clouddn.com.

0 / 68
http://7xkq8q.com5.z0.glb.clouddn.com/.../toolwizcleaner401131.apk  (400655906a738c2860c08e6f9996ab32)

The following 16 files have been seen to comunicate with 7xkq8q.com5.z0.glb.clouddn.com in live environments.

TCP » 66.114.52.21:80
1468567241.exe

TCP » 66.114.52.15:80
1468567241.exe

TCP » 66.114.52.21:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.15:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.15:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.15:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
claraupdater_new.exe (ClaraUpdater by ClaraLabs)

TCP » 66.114.52.15:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
weathermini.exe (The Desktop Weather by ShenZhen Enode Techology co,.Ltd)

TCP » 66.114.52.21:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.15:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.15:80
{6ae11fc7-5aaf-401c-8438-ef3bbc2bb80b}.exe (toolmini Application)

TCP » 66.114.52.15:80
browserinfo.exe

TCP » 66.114.52.15:80
Iminent.exe (Iminent)

TCP » 66.114.52.15:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.21:80
Iminent.exe (Iminent)

TCP » 66.114.52.21:80
1stbrowser.exe (Installer by S)

 
Latest 20 of 41 files

URL:
http://7xkq8q.com5.z0.glb.clouddn.com/

Web server:
PWS/8.1.36

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.