home

qtupdate.klasnetwork.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain qtupdate.klasnetwork.com is registered by proxy through GODADDY.COM, LLC and was originally registered in June of 2014. The hosted servers are located in United, Pennsylvania within the United States which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Pennsylvania, United States (US)

Create date:
Wednesday, June 25, 2014

Expires date:
Saturday, June 25, 2016

Updated date:
Thursday, June 25, 2015

ASN:
AS60068 CDN77 Datacamp Limited,GB

Root domain:
klasnetwork.com

Whois:
1 klasnetwork.com record

The domain qtupdate.klasnetwork.com has been seen to resolve to the following 8 IP addresses.

185.59.223.24
new-york-2.cdn77.com
July 26, 2016

185.59.223.23
new-york-20.cdn77.com
July 9, 2016

185.59.223.28
new-york-20.cdn77.com
June 29, 2016

185.59.223.22
new-york-20.cdn77.com
June 26, 2016

185.93.0.27
atlanta-4.cdn77.com
June 18, 2016

185.59.223.27
new-york-20.cdn77.com
June 3, 2016

185.59.223.26
new-york-20.cdn77.com
May 29, 2016

185.93.0.16
atlanta-3.cdn77.com
May 23, 2016

File downloads found at URLs served by qtupdate.klasnetwork.com.

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/198/.../setup.exe  (51570ca5c17a52fefe35910dcf3370ab)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/194/.../setup.exe  (aba38ef7ffcb4b5ca9d62ae377ff3b30)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/256/.../FenomenBet.exe  (c8cf1449af59325ace0048f83f022341)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/242/.../setup.exe  (94e0af29587edaf5386014836cb35ec9)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/244/.../BelugaBetting.exe  (ef4e7deb454cd17926c2895fd673a72c)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/197/.../setup.exe  (57d97225770bfe74ec06f012503c403f)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/197/.../CratosSlots.exe  (16dec11ba2d243fca2e578ab3a6f354c)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/374772/.../setup.exe  (f7662af8b9883a4880a7a54d6177fabe)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/243/.../SavoyBetting.exe  (protocolhandler.exe)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/240/.../RestBet.exe  (844b65b5e95689413c8c8cd89e71ff0f)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/242/.../ImajBet.exe  (protocolhandler.exe)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/240/.../setup.exe  (6165dd3769362ee4ff6e867722635540)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/248/.../SafirBet.exe  (4e6175f174603c9f920c706cc859fbd7)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/238/.../setup.exe  (8f414608e48bb45e38a61cdbab9c62c2)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/244/.../setup.exe  (c808aa06e10642c7fa3fe1b1e140d4c4)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/255/.../PuliBet.exe  (f699a845a78f0049d2b266101c267cbe)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/186/.../setup.exe  (187be412c4781ed5c2e48a96dfa7fc0d)

0 / 68
http://qtupdate.klasnetwork.com/windows/installers/125/.../setup.exe  (e157a49a27e7768450b8afa05d5f956e)

The following 13 files have been seen to comunicate with qtupdate.klasnetwork.com in live environments.

TCP » 185.59.223.24:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.26:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 185.59.223.28:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.26:443
jingling.exe

TCP » 185.59.223.24:443
beaglebrowser.exe (BeagleBrowser by The BeagleBrowser Authors)

TCP » 185.59.223.24:443
mustang.exe (Mustang Browser by Rafotech)

TCP » 185.59.223.24:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.24:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.59.223.24:443
online-guardian-v2.0.9.exe

TCP » 185.59.223.26:80
Client.exe

TCP » 185.59.223.27:443
online-guardian-v2.0.9.exe

TCP » 185.59.223.23:80
Launcher.exe (AuraKingdom.to Online by AuraKingdom.To)

TCP » 185.59.223.24:80
browser.exe (Browser)

TCP » 185.59.223.24:443
online-guardian-v2.0.9.exe

TCP » 185.59.223.26:80
unicobrowser.exe (Unico Browser by The Unico Browser Authors)

URL:
http://qtupdate.klasnetwork.com/

SSL certificate subject:
CN=1580048121.rsc.cdn77.org

SSL certificate issuer:
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

Web server:
CDN77-Turbo

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.