home

www.irai.com

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S.,FR

Root domain:
irai.com

The domain www.irai.com has been seen to resolve to the following IP address.

62.210.16.62
pf-lb-2.online.net
April 15, 2016

File downloads found at URLs served by www.irai.com.

0 / 68
http://www.irai.com/.../ask.exe  (37479f9ae9b96e3dc84175533164cd63)

0 / 68
http://www.irai.com/.../a8118.exe  (afaabed386daf2ecb74db68774c3fd9a)

0 / 68
http://www.irai.com/.../a8118.exe  (7320de03a5d38eb14a3c596752380ff6)

0 / 68
http://www.irai.com/.../vu1119r3.exe  (3a8faa25a6d658b5cb82aad457d75cc3)

0 / 68
http://www.irai.com/.../a8118.exe  (c435083111d80a745c55be7d4b894338)

0 / 68
http://www.irai.com/.../asiprem8016r5.exe  (407ed5032b3fac046769d1a2322629b4)

0 / 68
http://www.irai.com/.../setup.exe  (0bff2dc0cedc6255bd76a27f0270f3e2)

The following 6 files have been seen to comunicate with www.irai.com in live environments.

TCP » 62.210.16.62:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 62.210.16.62:80
online-guardian-v2.0.9.exe

TCP » 62.210.16.62:80
ssn.exe (ssn)

TCP » 62.210.16.62:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 62.210.16.62:80
online-guardian-v2.0.9.exe

TCP » 62.210.16.62:25
www.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.