home

ng1.x9top.info

Pham Tuan Anh

Domain Information

The hosted servers are located in Ha Noi, Dak Lak within Vietnam which resides on the Asia Pacific Network Information Centre network.
Registrar:
GoDaddy.com, LLC

Server location:
Dak Lak, Vietnam (VN)

ASN:
AS7643 VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT),VN

Root domain:
x9top.info

Whois:
2 x9top.info records

The domain ng1.x9top.info has been seen to resolve to the following IP address.

123.30.238.29
static.vdc.vn
July 1, 2015

File downloads found at URLs served by ng1.x9top.info.

1 / 68
http://ng1.x9top.info/soft/2014/.../mp3directcut_220.exe  (mp3dc220.exe)

2 / 68      (PUP)
http://ng1.x9top.info/v1607soft/2014/.../pctuneup-free-wifi-hotspot-creator_416.exe  (pctuneupwifihotspotcreator.exe)

2 / 68
http://ng1.x9top.info/v1607soft/2014/.../chipgenius.exe  (chipgenius v3.011.exe)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../jahshaka_20.exe  (jahshaka-2.0-installer.exe)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../chinese-chess_10.exe  (hiddenlynxsetup.exe)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../activinspire_13.exe  (không được xác nhận 198655.crdownload)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../crackit_10.msi  (b43325dddb179488320b887ecd0db898)

0 / 68
http://ng1.x9top.info/2014/.../facebook-messenger-for-windows_122030.exe  (32b75d9da0b7578cdddcd74a7dbdbeaf)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../vntools_120_office2007.exe  (bd429669a8ffa930d74a8faa6a24c112)

2 / 68
http://ng1.x9top.info/v1607soft/2014/.../pivot-stickfigure-animator_227.exe  (pivot_setup.exe)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../day-hoc-toan-lop-1_10.exe  (hoctoan1demo_setup.exe)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../giaphavn_10.exe  (ac97e8227cece235edbc84d05da29115)

2 / 68
http://ng1.x9top.info/2014/.../facebook-messenger-for-windows_122030.exe  (download-facebookmessengersetup.exe)

0 / 68
http://ng1.x9top.info/v1607soft/2014/.../sound-booster_11_build88.exe  (soundboostersetup.exe)

0 / 68
http://ng1.x9top.info/soft/2014/.../sound-booster_11_build88.exe  (soundboostersetup.exe)

The following 7 files have been seen to comunicate with ng1.x9top.info in live environments.

TCP » 123.30.238.29:80
browser.exe (CocCoc by Coc Coc Co.)

TCP » 123.30.238.29:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.29:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.29:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.29:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.29:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 123.30.238.29:80
3eebdfe20858d43b1e31b8c28eaa289d.exe

URL:
http://ng1.x9top.info/

Web server:
nginx/1.4.3

software-cnet.com

softwaretop.net

tai-talking-tom.mobi

tai-zalo-chat.net

taimienphi.vn

tuviviet.net

x8top.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.