home

sub.ximbia.info

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ximbia.info

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Quick Heal
Adware.NSIS.BetterInstaller.A
100.00%

Trend Micro House Call
Suspicious_GEN.F47V1230
100.00%

Kaspersky
not-a-virus:Downloader.Win32.AdLoad
100.00%

Sophos
Generic PUA FM
100.00%

McAfee
Artemis!A6BA805A3252
100.00%

Baidu Antivirus
Adware.Win32.Somoto
100.00%

ESET NOD32
Win32/Somoto
100.00%

AVG
Downloader
100.00%

Panda Antivirus
Generic Suspicious
100.00%

Qihoo 360 Security
Win32/Virus.Downloader.6b0
100.00%

The domain sub.ximbia.info has been seen to resolve to the following 7 IP addresses.

216.137.33.219
server-216-137-33-219.iad2.r.cloudfront.net
February 13, 2015

216.137.33.108
server-216-137-33-108.iad2.r.cloudfront.net
February 13, 2015

54.230.102.84
server-54-230-102-84.iad2.r.cloudfront.net
February 13, 2015

54.192.101.115
server-54-192-101-115.iad2.r.cloudfront.net
February 13, 2015

54.192.101.109
server-54-192-101-109.iad2.r.cloudfront.net
February 13, 2015

54.192.101.93
server-54-192-101-93.iad2.r.cloudfront.net
February 13, 2015

54.192.101.85
server-54-192-101-85.iad2.r.cloudfront.net
February 13, 2015

File downloads found at URLs served by sub.ximbia.info.

10 / 68    (PUP)
http://sub.ximbia.info/Qd4l2ixv4bd8a17b8444724fac5acaf676eb2c27e3wePU6E7JnTYToyOntzOjI6InRzIjtpOjE0MTk1MDEzMDc7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQxNDY4NjU4ODk5Mi5leGUiO30=  (quake_downloader-qd4l2ixv4.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.