home

logc7.xiti.com

applied technologies internet

Domain Information

The domain logc7.xiti.com registered by applied technologies internet was initially registered in March of 2000 through ONLINE SAS. The hosted servers are located in Merignac, Aquitaine within France which resides on the RIPE Network Coordination Centre network.
Registrar:
ONLINE SAS

Server location:
Aquitaine, France (FR)

Create date:
Wednesday, March 1, 2000

Expires date:
Sunday, March 1, 2015

Updated date:
Friday, January 24, 2014

ASN:
AS49030 AT-INTERNET Applied Technologies Internet SAS

Root domain:
xiti.com

Whois:
1 xiti.com record

The domain logc7.xiti.com has been seen to resolve to the following IP address.

62.161.94.220
December 26, 2013

File downloads found at URLs served by logc7.xiti.com.

2 / 68      (PUP)
http://logc7.xiti.com/go.click?xts=180213&s2=7&p=winzip_en_francais&clic=T&type=click&url=http://inst.winzip.com/.../dl.php?&pid=2793661  (oiassistwtd.exe)

0 / 68
http://logc7.xiti.com/go.click?xts=180213&s2=7&p=winrar_64_bits&clic=T&type=click&url=http://www.rarlab.com/.../winrar-x64-500fr.exe&Rdt=On  (324610454_stp.exe)

1 / 68
http://logc7.xiti.com/go.click?xts=180213&s2=7&p=clonecd&clic=T&type=click&url=http://.../SetupCloneCD.exe  (2533669_stp.exe)

1 / 68
http://logc7.xiti.com/go.click?xts=180213&s2=7&p=clonecd&clic=T&type=click&url=http://.../SetupCloneCD.exe&Rdt=On  (2533669_stp.exe)

0 / 68
http://logc7.xiti.com/go.click?xts=180213&s2=7&p=winrar_64_bits&clic=T&type=click&url=http://www.rarlab.com/.../winrar-x64-500fr.exe  (324610454_stp.exe)

The following 20 files have been seen to comunicate with logc7.xiti.com in live environments.

TCP » 62.161.94.220:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 62.161.94.220:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 62.161.94.220:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 62.161.94.220:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 62.161.94.220:80
browser.exe (speed browser by Smart Applications)

TCP » 62.161.94.220:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 62.161.94.220:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 62.161.94.220:80
ssn.exe (ssn)

TCP » 62.161.94.220:80
browser.exe (Speed Browser by Smart Applications)

TCP » 62.161.94.220:80
browser.exe (Speed Browser by Smart Applications)

TCP » 62.161.94.220:80
browser.exe (Speed Browser by Smart Applications)

TCP » 62.161.94.220:80
apptrailers.exe

TCP » 62.161.94.220:80
apptrailers.exe

TCP » 62.161.94.220:80
browser.exe (speed browser by Smart Applications)

TCP » 62.161.94.220:80
AdMunch.exe (Ad Muncher by Murray Hurps Software Pty)

TCP » 62.161.94.220:80
AdMunch.exe (Ad Muncher by Murray Hurps Software Pty)

TCP » 62.161.94.220:80
google-search.exe (Google Search by Google)

TCP » 62.161.94.220:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 62.161.94.220:80
online-guardian-v2.0.9.exe

TCP » 62.161.94.220:80
citrio.exe (Citrio by CatalinaGroup)

 
Latest 20 of 26 files

URL:
http://logc7.xiti.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.