» dl.7r7z.com
Overview
IPs Addresses (5)
Downloads (8)
Network (31)
Website Detail
Related Domains (16)

dl.7r7z.com

xiao jie

Domain Information

The domain dl.7r7z.com registered by xiao jie was initially registered in July of 2014 through DOMAIN NAME NETWORK PTY LTD. The hosted servers are located in Guangzhou, Guangdong within China which resides on the Asia Pacific Network Information Centre network.

Registrant:

xiao jie

Registrar:

DOMAIN NAME NETWORK PTY LTD

Server location:

Guangdong, China (CN)

Create date:

Thursday, July 24, 2014

Expires date:

Monday, July 24, 2017

Updated date:

Thursday, January 8, 2015

ASN:

AS58466 CT-GUANGZHOU-IDC CHINANET Guangdong province network,CN

Root domain:

7r7z.com

Whois:

1 7r7z.com record

Google Safe Browsing:

unwanted

Scan engine

Details

Detections

ESET NOD32

Win32/Baidu.C potentially unwanted, Win32/RiskWare.Yantai (variant), Win32/Packed.NSISmod.E suspicious (variant)

60.00%

Dr.Web

Trojan.KillFiles.28526, Adware.ShouQu.5, riskware program Program.Unwanted.432, Trojan.KillFiles.28526

60.00%

Zillya! Antivirus

Trojan.Yantai.Win32.2, Adware.ShouQuCRTD.Win32.150

40.00%

G Data

Application.Generic.1517202, Win32.Application.Agent.IT4ZRW

40.00%

McAfee

Artemis!985591BD9A82, Artemis!894FDF69F509

40.00%

IKARUS anti.virus

PUA.RiskWare.Yantai, PUA.Generic

40.00%

Fortinet FortiGate

W32/Generic.AC.18053, Riskware/Xiaoxiong

40.00%

AVG

Generic

40.00%

Bkav FE

W32.FamVT.YantaiTTc

20.00%

MicroWorld eScan

Application.Generic.1517202

20.00%

K7 AntiVirus

Unwanted-Program

20.00%

Arcabit

Application.Generic.D172692

20.00%

NANO AntiVirus

Riskware.Win32.ShouQu.dmnfjx

20.00%

F-Prot

W32/ShouQu.C.gen

20.00%

Clam AntiVirus

Win.Trojan.691128

20.00%

The domain dl.7r7z.com has been seen to resolve to the following 5 IP addresses.

May 27, 2016

May 27, 2016

May 27, 2016

January 30, 2016

January 30, 2016

File downloads found at URLs served by dl.7r7z.com.

1 / 68 (inconclusive)

http://dl.7r7z.com/down.php?sid=530 (5590b2ba_1202000051.exe)

10 / 68 (PUP)

http://dl.7r7z.com/down.php?sid=530 (game_3581xvr.exe)

1 / 68 (PUP)

http://dl.7r7z.com/down.php?sid=334 (setup_196eufw.exe)

0 / 68

http://dl.7r7z.com/down.php?sid=530 (setup_479orgt.exe)

5 / 68 (PUP)

http://dl.7r7z.com/down.php?sid=412 (¸ßçå°æ_412.exe)

0 / 68

http://dl.7r7z.com/down.php?sid=530 (setup_562asvj.exe)

0 / 68

http://dl.7r7z.com/down.php?sid=530 (setup_530gtqu.exe)

24 / 68 (PUP)

http://dl.7r7z.com/down.php?sid=334 (setup_334.exe)

The following 31 files have been seen to comunicate with dl.7r7z.com in live environments.

TCP » 125.88.65.249:80

piao_5.2.0.50.crx

TCP » 125.88.65.249:80

piao.crx

TCP » 183.56.172.10:80

life_assistant.crx

TCP » 183.56.172.10:80

leidian.crx

TCP » 183.56.172.10:80

music.crx

TCP » 183.56.172.10:80

novel.crx

TCP » 183.56.172.10:80

life_assistant.crx

TCP » 183.56.172.10:80

leidian.crx

TCP » 183.56.172.10:80

shipin.crx

TCP » 183.56.172.10:80

music.crx

TCP » 183.56.172.10:80

novel.crx

TCP » 183.56.172.10:80

leidian.crx

TCP » 183.56.172.10:80

ejmoceoaphoacojefmkhmfbgkidaefdl.crx

TCP » 183.56.172.10:80

live_assist.crx

TCP » 183.56.172.229:80

piao_5.2.0.32.crx

TCP » 183.56.172.229:80

piao.crx

TCP » 183.56.172.229:80

piao.crx

TCP » 183.56.172.229:80

fqb.crx

TCP » 183.56.172.229:80

fvddownloader_2.1.1.crx

TCP » 183.56.172.229:80

cortica_addon_3.2.0.88.crx

Latest 20 of 31 files

URL:

http://dl.7r7z.com/

Title:

“dl”

Web server:

nginx

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.