home

dl.patch.360safe.com

Beijing Qihu Technology Company Limited

Domain Information

The domain dl.patch.360safe.com registered by Beijing Qihu Technology Company Limited was initially registered in May of 2006 through GODADDY.COM, LLC. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Wednesday, May 17, 2006

Expires date:
Tuesday, May 17, 2016

Updated date:
Wednesday, April 15, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
360safe.com

Whois:
1 360safe.com record

The domain dl.patch.360safe.com has been seen to resolve to the following 16 IP addresses.

54.230.193.89
server-54-230-193-89.iad53.r.cloudfront.net
August 28, 2016

54.230.193.65
server-54-230-193-65.iad53.r.cloudfront.net
August 28, 2016

54.230.193.28
server-54-230-193-28.iad53.r.cloudfront.net
August 28, 2016

54.230.193.8
server-54-230-193-8.iad53.r.cloudfront.net
August 28, 2016

54.230.193.202
server-54-230-193-202.iad53.r.cloudfront.net
August 28, 2016

54.230.193.195
server-54-230-193-195.iad53.r.cloudfront.net
August 28, 2016

54.230.193.185
server-54-230-193-185.iad53.r.cloudfront.net
August 28, 2016

54.230.193.122
server-54-230-193-122.iad53.r.cloudfront.net
August 28, 2016

54.192.195.162
server-54-192-195-162.iad53.r.cloudfront.net
October 20, 2015

54.192.194.195
server-54-192-194-195.iad53.r.cloudfront.net
October 20, 2015

54.192.194.177
server-54-192-194-177.iad53.r.cloudfront.net
October 20, 2015

54.192.194.153
server-54-192-194-153.iad53.r.cloudfront.net
October 20, 2015

54.192.193.53
server-54-192-193-53.iad53.r.cloudfront.net
October 20, 2015

54.192.192.110
server-54-192-192-110.iad53.r.cloudfront.net
October 20, 2015

54.230.192.183
server-54-230-192-183.iad53.r.cloudfront.net
October 20, 2015

54.230.192.149
server-54-230-192-149.iad53.r.cloudfront.net
October 20, 2015

File downloads found at URLs served by dl.patch.360safe.com.

0 / 68
http://dl.patch.360safe.com/leak/.../Shockwave_Installer_Slim_KB370347.exe  (shockwave_installer_slim.exe)

0 / 68
http://dl.patch.360safe.com/leak/.../jre-8u51-windows-i586.exe  (8f061e42a33d2017af3f0f7d5245d4eb)

The following 9 files have been seen to comunicate with dl.patch.360safe.com in live environments.

TCP » 54.230.193.89:443
online-guardian-v2.0.9.exe

TCP » 54.230.192.149:443
online-guardian-v2.0.9.exe

TCP » 54.230.193.89:443
online-guardian-v2.0.9.exe

TCP » 54.192.192.110:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.193.65:443
online-guardian-v2.0.9.exe

TCP » 54.230.193.65:80
whatsapptime.exe

TCP » 54.192.192.110:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 54.192.192.110:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.230.193.89:443
apptrailers.exe

TCP » 54.230.192.149:443
online-guardian-v2.0.9.exe

TCP » 54.230.193.65:443
rthdcpd.exe

TCP » 54.192.192.110:80
client.exe

URL:
http://dl.patch.360safe.com/

Network:
Amazon Cloudfront

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.