Domain > down.xiazai2.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to down.xiazai2.net

MD5	A/V
77d80167665174be186e817c04bae481	[Artemis!77D801676651] [Trojan.Win32.Winlock.dqvnat] [Trojan.Winlock!b+S5+jzKcmM] [Artemis!Trojan] [W32/Trojan.TSRN-6250] [PUA.Softcnapp]
560139322aa017e4e7436ea53c8dc549	[Trojan.Win32.Winlock.dqvnat] [Downloader.Upatre] [Artemis!Trojan] [PUP/Win32.Helper] [Artemis!560139322AA0] [PUA.Softcnapp]
b1f16d82b00773e259eeb84a9873427e	[W32.Clod6c1.Trojan.e61a] [Artemis!B1F16D82B007] [PUP.Optional.Downloader] [Trojan.Win32.Winlock.dqvnat] [Artemis!Trojan] [W32/Trojan.UQQB-9111] [PUP/Win32.Helper] [PUA.Softcnapp]
a849a0b2a6380c9114a9a7697beb0fc9
0e63a169332d5b86202eb44cd764956a
f776759ffd57756b49527bc19253ebcf	[W32.HfsAdware.81D2] [PUP.Optional.Softcnapp] [PUA_Softcnapp] [Trojan.Win32.Winlock.dqvnat] [PUA_Softcnapp] [Artemis!PUP] [W32/Trojan.IIDX-5889] [PUP/Win32.Helper] [Artemis!F776759FFD57] [PUA.Win32.Softcnapp.H]
dbfc8746e52c3525a023f08d83c76f53
220cc4f0f4561c217dc8c7312c19b8ee
0a9e7e5bc35fa10ace323411f601ccba	[W32.HfsAdware.81D2] [Artemis!0A9E7E5BC35F] [PUP.Optional.Softcnapp] [Trojan.Win32.Winlock.dqvnat] [Artemis!Trojan] [SoftwareBundler:Win32/Xiazai] [PUP/Win32.Helper] [PUA.Win32.Softcnapp.H]
eb935ecee39dfeebd3c7601bcd62e0f3	[Artemis!EB935ECEE39D] [SMG.Heur!cg1] [Win.Trojan.Win32-3] [Trojan.Win32.Winlock.dqvnat] [Artemis!Trojan] [PUP/Win32.Helper] [PUA.Softcnapp]
8987e58efc728d687dce15c440143a71
f808a448d55adc4695311ed2fcbf79ee	[W32.HfsAdware.F4B9] [Adware.BrowseFox.Win32.252892] [Win.Trojan.15467337] [not-a-virus:Downloader.NSIS.Xiazai.a] [Win32.Adware.Bp-softcnapp.Okcs] [SoftwareBundler:Win32/Xiazai] [PUA.Softcnapp]
c36159d42166ab1c6c3ac52d8f5e155a	[W32.HfsAdware.F4B9] [Application.Bundler.Xiazai.A] [PUP.Optional.ChinAd] [Adware.BrowseFox.Win32.303151] [Application.Bundler.Xiazai.A] [Trojan.Win32.Softcnapp.eaeqxf] [PUA_DOWNER.GB] [not-a-virus:Downloader.NSIS.Xiazai.ta] [Trojan.Kazy!9RyZyPjRf68] [Application.Bundler.Xiazai.A] [ApplicUnwnt.Win32.Softcnapp.A] [Application.Bundler.Xiazai] [PUA_DOWNER.GB] [Artemis!PUP] [W32/Trojan.OPCM-4083] [PUA/Xiazai.1973] [SoftwareBundler:Win32/Xiazai] [Application.Bundler.Xiazai.A] [Application.Bundler.Xiazai.A] [Artemis!C36159D42166] [Trojan.Taranis] [Riskware/Xiazai]
2c1c061e7743fbaa210ac68cc7d1edc3	[W32.HfsAdware.F4B9] [Artemis!2C1C061E7743] [PUP.Optional.ChinAd] [Trojan.Winlock!FiLvOccfPP8] [not-a-virus:Downloader.NSIS.Xiazai.cbx] [Trojan.Winlock.12717] [Downloader.Xiazai.Win32.1] [Artemis!PUP] [TR/Taranis.2497] [Riskware/Xiazai] [Troj.Downloader.Nsis.Xiazai!c] [SoftwareBundler:Win32/Xiazai] [PUP/Win32.ShortCut] [Downloader.Xiazai] [Trojan.Taranis] [Trj/CI.A]
5c0e427e0aeb52d03b32f01bc8b26ce1	[W32.HfsAdware.F4B9] [PUP.Optional.ChinAd] [Trojan.Winlock!FiLvOccfPP8] [HT_ZYX_FC18024C.UVPM] [Trojan.Winlock.12717] [Downloader.Xiazai.Win32.1] [TR/Taranis.2497] [SoftwareBundler:Win32/Xiazai] [Downloader.Xiazai] [Trojan.Taranis]
d178ce0b3ee47d3c701923f22416125c

Whois

Property	Value
Email	yaoyaobeian@aliyun.com
NameServer	F1G1NS2.DNSPOD.NET
Created	2015-01-19 00:00:00
Changed	2015-02-28 00:00:00
Expires	2017-01-19 00:00:00
Registrar	SHANGHAI MEICHENG TE

DNS Resolutions

Date	IP Address
2015-06-26	122.114.50.189 (ClassC)
2015-08-04	211.149.231.175 (ClassC)
2015-08-04	211.149.245.113 (ClassC)
2015-08-27	122.114.91.56 (ClassC)
2016-02-26	183.60.107.177 (ClassC)
2019-06-08	121.42.224.176 (ClassC)
2019-09-06	121.41.10.159 (ClassC)
2024-08-02	63.143.32.91 (ClassC)
2025-01-26	95.211.75.25 (ClassC)
2025-05-27	209.126.123.13 (ClassC)
2025-07-01	199.115.115.118 (ClassC)
2025-07-16	199.115.115.102 (ClassC)
2025-07-22	199.115.115.119 (ClassC)
2025-08-05	209.126.123.11 (ClassC)
2025-08-12	199.115.115.116 (ClassC)
2025-09-01	209.126.123.12 (ClassC)
2025-10-18	104.247.82.52 (ClassC)
2026-02-28	104.247.81.99 (ClassC)

Subdomains

Date	Domain	IP
xiazai.xiazai2.net	2015-06-19	8.37.235.5
down.xiazai2.net	2015-06-26	122.114.50.189

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]