This is a summary of what was observed on gorodsnov.cn.

Network Information

IPASNCountry
210.51.166.2479929CN
(Click on any AS number to see its FIRE report)

Other domains on this IP:

Registration Information

Analysis Information

Malicious and Suspicious URLs

URLFirst DetectedLast Detected
http://gorodsnov.cn/file1.exe 2009-09-24 14:52:03 (same)
http://gorodsnov.cn/file10.exe 2009-09-24 14:58:43 (same)
http://gorodsnov.cn/file11.exe 2009-09-24 14:58:59 (same)
http://gorodsnov.cn/file12.exe 2009-09-24 14:59:15 (same)
http://gorodsnov.cn/file13.exe 2009-09-24 15:44:04 (same)
http://gorodsnov.cn/file2.exe 2009-09-24 14:52:23 (same)
http://gorodsnov.cn/file3.exe 2009-09-24 14:53:45 (same)
http://gorodsnov.cn/file4.exe 2009-09-24 14:54:00 (same)
http://gorodsnov.cn/file5.exe 2009-09-24 14:54:16 (same)
http://gorodsnov.cn/file6.exe 2009-09-24 14:54:32 (same)
http://gorodsnov.cn/file7.exe 2009-09-24 14:54:48 (same)
http://gorodsnov.cn/file8.exe 2009-09-24 14:58:10 (same)
http://gorodsnov.cn/file9.exe 2009-09-24 14:58:27 (same)

Exploits Detected

No exploits detected.

Last URLs

http://gorodsnov.cn/news.php?s=bc860360ef benign
http://gorodsnov.cn/file13.exe suspicious
http://gorodsnov.cn/file12.exe suspicious
http://gorodsnov.cn/file11.exe suspicious
http://gorodsnov.cn/file10.exe suspicious
http://gorodsnov.cn/file9.exe suspicious
http://gorodsnov.cn/file8.exe suspicious
http://gorodsnov.cn/file7.exe suspicious
http://gorodsnov.cn/file6.exe suspicious
http://gorodsnov.cn/file5.exe suspicious

Linking Information

gorodsnov.cn links to the following domains, either directly or indirectly: