home

xiuxiu.dl.meitu.com

Xiamen Meitu Technology Co., Ltd.

Domain Information

The domain xiuxiu.dl.meitu.com registered by Xiamen Meitu Technology Co., Ltd. was initially registered in July of 2003 through ENAME TECHNOLOGY CO., LTD.. The hosted servers are located in Kunming, Yunnan within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
ENAME TECHNOLOGY CO., LTD.

Server location:
Yunnan, China (CN)

Create date:
Sunday, July 20, 2003

Expires date:
Tuesday, July 20, 2021

Updated date:
Wednesday, December 5, 2012

ASN:
AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN

Root domain:
meitu.com

Whois:
1 meitu.com record

Google Safe Browsing:
unwanted

Scan engine
Details
Detections

Trend Micro House Call
TROJ_GEN.F47V0227, TROJ_GE.3630F48E, HV_ALMA.19D871A8, Suspicious_GEN.F47V1118, Suspicious_GEN.F47V0214, Suspicious_GEN.F47V0311
81.82%

Dr.Web
Trojan.AVKill.19646, Tool.Starter.6
81.82%

McAfee
Artemis!2D4C9298EFB4, Artemis!2D8615D32E0D, Artemis!6478ACA63478, Artemis!EA3BCCC9E2F1, Artemis!D5DCBEBE10E2, Artemis!582462FCDBFA, Artemis!C22EE4A2E0AE
63.64%

NANO AntiVirus
Trojan.Win32.Zusy.cthflm, Trojan.Win32.Nimda.csyzrm, Trojan.Win32.Runouce.crapdb
54.55%

Agnitum Outpost
Trojan.AVKill, Trojan.Freyja, Trojan.Rogue
54.55%

Clam AntiVirus
Win.Trojan.Agent-883221, Win.Worm.Chir-2563
27.27%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
9.09%

Avira AntiVirus
TR/Agent.29920032
9.09%

IKARUS anti.virus
Trojan.Patched
9.09%

Malwarebytes
Adware.Bibibey
9.09%

Norman
Obfuscated.EX!genr
9.09%

The domain xiuxiu.dl.meitu.com has been seen to resolve to the following 47 IP addresses.

174.35.27.70
August 5, 2016

174.35.27.73
July 26, 2016

174.35.72.82
June 7, 2016

174.35.76.11
May 20, 2016

174.35.73.110
May 20, 2016

174.35.73.213
May 19, 2016

174.35.73.157
May 19, 2016

66.114.52.21
April 21, 2016

174.35.27.76
April 15, 2016

66.114.52.15
April 10, 2016

66.114.52.14
April 8, 2016

66.114.52.18
April 6, 2016

66.114.52.7
April 6, 2016

66.114.52.6
April 6, 2016

66.114.52.17
April 1, 2016

66.114.52.16
March 31, 2016

66.114.52.9
March 31, 2016

66.114.52.10
February 29, 2016

66.114.52.13
February 27, 2016

174.35.27.74
February 22, 2016

66.114.52.8
February 22, 2016

66.114.52.5
February 22, 2016

174.35.27.71
February 22, 2016

66.114.52.19
February 10, 2016

174.35.27.77
February 10, 2016

174.35.73.109
February 10, 2016

174.35.73.92
February 10, 2016

174.35.27.75
February 7, 2016

66.114.52.20
February 1, 2016

66.114.52.11
February 1, 2016

 
Showing 30 of 47 IP Addresses

File downloads found at URLs served by xiuxiu.dl.meitu.com.

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.1.6.exe  (9bc9262896af1624242880c747bb65ad)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_4.0.1.exe  (43556669c3a55e957c3711496a49d038)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.9.4.exe  (c19d5309a4f3ed4862f7b49cf0030a41)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.6.1.exe  (bdaafff54a59332f0b7c6aac8174dce4)

6 / 68      (Malware)
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.8.1.exe  (582462fcdbfafa6703bb24d3adaed619)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_New.exe  (afec0d2c71ab31c9a5b714aa0fcae434)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Green.exe  (5e7db71b2bcc208449860bb3b7f2ca6a)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.1.5.exe  (e296ce2a8cb36425d500cca3dfc93c42)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Preview_Setup0109.exe  (ae9161847a948beac6d2c8a47a80dc79)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.9.6.exe  (ad1529cc5ad6e944630f0ddfcf29a412)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.8.0.exe  (d892b74981666f0e16ed61aacb872201)

0 / 68
http://xiuxiu.dl.meitu.com/.../XiuXiu_381_Setup.exe  (b4367d55889df8e1e6a4057274bb36a2)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.0.8.exe  (10748df1e60627d66cd6db61590273c4)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Setup.exe  (32ee0485512b782687c48e72b7699256)

1 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.8.0.exe  (df25fb6e6d1229980d34a259b0f8a0a4)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_4.0.1.exe  (788fe36d9b176ce32671dc9d148522a6)

4 / 68      (inconclusive)
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.9.1.exe  (28ac5d316063be6a95b4eca253cfd07a)

6 / 68      (Malware)
http://xiuxiu.dl.meitu.com/XiuXiu_Setup_3.9.6.exe  (d5dcbebe10e205e617cbe7be93e0ad1b)

4 / 68      (inconclusive)
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.9.3.exe  (0f551898f3496491548b9c6f3b389a5d)

5 / 68      (Malware)
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_4.0.0.exe  (ea3bccc9e2f1a4973cfeb9cda1f32ac1)

0 / 68
http://xiuxiu.dl.meitu.com/.../renren_upload.exe  (bc316bbc2945faf1b447834225eec058)

0 / 68
http://xiuxiu.dl.meitu.com/XiuXiu_360Setup_3.1.6.exe  (577c68392aa5437ac0785fa402668cff)

The following 80 files have been seen to comunicate with xiuxiu.dl.meitu.com in live environments.

TCP » 66.114.52.19:80
1468567241.exe

TCP » 66.114.52.14:80
1468567241.exe

TCP » 174.35.27.72:80
1468567241.exe

TCP » 66.114.52.5:80
tools_update.exe

TCP » 66.114.52.21:80
1468567241.exe

TCP » 66.114.52.9:80
1468567241.exe

TCP » 66.114.52.15:80
1468567241.exe

TCP » 66.114.52.5:80
1468567241.exe

TCP » 174.35.73.92:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.73:80
1468567241.exe

TCP » 66.114.52.16:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
1468567241.exe

TCP » 66.114.52.11:80
1468567241.exe

TCP » 174.35.73.84:80
1468567241.exe

TCP » 66.114.52.8:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.16:80
1468567241.exe

TCP » 174.35.27.71:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.7:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.5:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.76.11:80
1468567241.exe

 
Latest 20 of 653 files

URL:
http://xiuxiu.dl.meitu.com/

Web server:
PWS/8.1.36

Facebook:
Likes:  9
Shares:  7

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.