home

downar.hi-player.com

pater

Domain Information

The domain downar.hi-player.com registered by pater was initially registered in April of 2012 through GODADDY.COM, LLC. The hosted servers are located in Gosport, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
England, United Kingdom (GB)

Create date:
Sunday, April 15, 2012

Expires date:
Friday, April 15, 2016

Updated date:
Sunday, November 16, 2014

ASN:
AS35662 REDSTATION Redstation Limited

Root domain:
hi-player.com

Whois:
3 hi-player.com records

The domain downar.hi-player.com has been seen to resolve to the following 4 IP addresses.

69.39.236.56
ip-69.39.236.56.hosted.by.gigenet.com
August 13, 2016

184.168.221.96
ip-184-168-221-96.ip.secureserver.net
June 4, 2016

176.227.208.44
h176-227-208-44.host.redstation.co.uk
August 19, 2014

80.243.186.250
redstation.com
December 23, 2013

File downloads found at URLs served by downar.hi-player.com.

0 / 68
http://downar.hi-player.com/Hiplayer_ar.exe  (70238e3e9e33e3fd21cf8801f5207eec)

0 / 68
http://downar.hi-player.com/hiplayer_8354_hao123_ar.exe  (ad798178a8fbe9618a79b5f9e57738f6)

0 / 68
http://downar.hi-player.com/hiplayer_280_ar.exe  (7ab3eff7d31f7c454649224e896c405f)

0 / 68
http://downar.hi-player.com/hiplayer_1015_ar.exe  (hiplayer_ar.exe)

0 / 68
http://downar.hi-player.com/hiplayer_323_ar.exe  (2550d2b7db09cb44628b0e170eabb7ad)

2 / 68      (inconclusive)
http://downar.hi-player.com/hiplayer_289_ar.exe  (hiplayer1.143.0.0.exe)

0 / 68
http://downar.hi-player.com/hiplayer_288_hao123_ar.exe  (99ac9207839eb219d48d0a4faac562de)

4 / 68
http://downar.hi-player.com/hiplayer_8404_hao123_ar.exe  (hiplayersetup-6107a794ccc4_8354_hao123_ar.exe)

2 / 68      (inconclusive)
http://downar.hi-player.com/hiplayer_1014_ar.exe  (hiplayer1.18.1.102.exe)

2 / 68      (inconclusive)
http://downar.hi-player.com/hiplayer_320_ar.exe  (hiplayer1.18.1.102.exe)

The following 411 files have been seen to comunicate with downar.hi-player.com in live environments.

TCP » 69.39.236.56:80
globalupdate.exe (globalUpdate Update by globalUpdate)

TCP » 184.168.221.96:80
jingling.exe

TCP » 184.168.221.96:80
jingling.exe

TCP » 69.39.236.56:8888
popdeals.exe (Today)

TCP » 69.39.236.56:80
9fe7cfbf-5cc9-4391-a512-8a764fd807c3-1-7.exe (CinemaPlus-3.2cV20.05 by Cinema PlusV20.05)

TCP » 69.39.236.56:80
9fe7cfbf-5cc9-4391-a512-8a764fd807c3-5.exe (CinemaPlus-3.2cV20.05 by Cinema PlusV20.05)

TCP » 69.39.236.56:80
1573.exe (SavePass 1.1 by OB)

TCP » 69.39.236.56:80
9fe7cfbf-5cc9-4391-a512-8a764fd807c3-3.exe (CinemaPlus-3.2cV20.05 by Cinema PlusV20.05)

TCP » 69.39.236.56:80
6054.exe (SavePass 1.1 by OB)

TCP » 69.39.236.56:80
5dfde4f5-80af-4a98-8da4-e95b948f183d-10.exe (Ge-Force by Webar)

TCP » 69.39.236.56:80
a4bc936c-5e01-43ed-9315-bef9a4ae2675-10.exe (SavePass 1.1 by OB)

TCP » 69.39.236.56:80
pricehorse.exe (by Pay By Ads)

TCP » 69.39.236.56:80
tbhcn.exe (tcbhn by Blabbers Communications)

TCP » 69.39.236.56:80
d488e0ef-38ce-4f88-bb4a-7a53ee6d0463-1-7.exe (CinemaPlus-4.5vV22.05 by Cinema PlusV22.05)

TCP » 184.168.221.96:80
jingling.exe

TCP » 69.39.236.56:80
dailybee.exe

TCP » 184.168.221.96:80
crossbrowse.exe (Crossbrowse)

TCP » 69.39.236.56:80
024a6571-2a4e-4467-b299-604f4b85d0bf-7.exe (CinemaPlus-4.5vV23.05 by Cinema PlusV23.05)

TCP » 69.39.236.56:80
avast.exe

TCP » 69.39.236.56:80
shopwit.exe (by Pay By Ads)

 
Latest 20 of 443 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.