home

b1.ge.tt

Domain Information

Server location:
Hovedstaden, DK (DK)

ASN:
AS9120 SURFTOWNNET Surftown A/S,DK

The domain b1.ge.tt has been seen to resolve to the following IP address.

212.97.130.90
jblob.coh.ge.tt
May 18, 2016

File downloads found at URLs served by b1.ge.tt.

0 / 68
http://b1.ge.tt/gett/.../facebook.jar?index=82&user=user-yN5KnYjOBgdBsbwZVjzvIwcX7eFrnCUysPfL2zw9D-&download=  (aa479179cf3fd6f4ba71a202db3d7c2d)

0 / 68
http://b1.ge.tt/gett/.../N8FanClub.com_albaniaQt_Livescore_v3.0_S3_Anna_Belle_Signed.sis?index=0&user=anon-otvofePZnbjUygcMvQy9go4ygXI2VObAsmzDIIPk-&download=  (453304270e6e069e3abf76d7e9466bb4)

0 / 68
http://b1.ge.tt/gett/.../N8FanClub.com_myWeather_v1.2_Signed.sis?index=0&user=anon-YgQhVVUXkV6a1oOb2ttT5ypBPn9cHlLnGIgP1Gr2x-&download=  (b27c1af95d368e29d743250bf39cbfa8)

0 / 68
http://b1.ge.tt/gett/.../A0600057.rar?index=0&user=anon-EWgFczNr0nwDCzjJgmYn0DeWRpshN8qnj0QI8OpY-9pCMEc22&download=  (bb9ba96ca9e3a9f96262186b34235b0b)

0 / 68
http://b1.ge.tt/gett/.../setup.exe  (3df21fe73892276fcde19be2528b3a20)

0 / 68
http://b1.ge.tt/gett/.../vIrUsDZ MD5 crypter.exe  (a68933f8122e8f125ec33e5bc8d6060c)

0 / 68
http://b1.ge.tt/gett/.../Kitchen Herb Cameos EL.zip?index=0&user=user-SoX99LALKCALUGGODy2slFqC3fkDnf87d4D0g-&download=  (5f8d5487061061670939afbc533f94ae)

0 / 68
http://b1.ge.tt/gett/.../Martha Pullen Baby Love.zip?index=0&user=anon-QXUxpmL4H4a4DBuKnvFRULMNmB6XnlagCpw18FmX-9pCMEc22&download=  (6bf61f8029ff480a2bb06022846559c7)

0 / 68
http://b1.ge.tt/gett/.../APK-Editor-Pro-1.3.16-Mod_sofdl.com.apk?index=0&user=anon-jEkJ43qkUPWA029mNjq0iEvf9rwx9hNhEvvfNCES-&download=  (20a8f00ba2eb031c1a385ec2296f4ba4)

4 / 68      (Malware)
http://b1.ge.tt/gett/.../chrone.exe  (0310c6044b089031e82140cfc4a7604f)

0 / 68
http://b1.ge.tt/gett/.../07.ZIP?index=0&user=user-oMR8Wx0hvTDk2Z7yldiGM34SQ3Cw0YfNINJv0-&download=  (4d6e8903e3d66c2365a0518d448e8aac)

0 / 68
http://b1.ge.tt/gett/.../com.liamw.root.androididchanger.20140219.apk?index=0&user=user-SS5O4Gjx14UsULcVpMdgTTZRGgUZsEsYWqnQDuHS-&download=  (android id changer 4.0.0.exe)

0 / 68
http://b1.ge.tt/gett/.../seo_indexer.rar?index=0&user=user-GhWiKSXr3U8G73NBLnAwNBKvC56XWLfTSsaWhMY9-&download=  (fbec746c1acda22fa118908b68dbdaeb)

0 / 68
http://b1.ge.tt/gett/.../Botanical Blues.zip?index=0&user=user-xS6wT2eoDpiD9CcZgBwuk2XhRdngwNVyjaVU5w1v-6Znyt642&download=  (742f2307c06bad89d9fefd69ea960a17)

0 / 68
http://b1.ge.tt/gett/.../AppNee.com.V.R.for.3M.D_2014_cf.7z?index=0&user=user-1MLFNsli6jN0jxAp1u6YmPoFdQpe5Wz2unOSYr2t-&download=  (1584bff2c0b6f7a2ef7590e061aa4c3f)

0 / 68
http://b1.ge.tt/gett/.../slowloris.pl?index=0&user=user-EDLNWakhfCDmNeG0BLTOhqgfRCmvogFSUqhENisk-6y7yvD42&download=  (15c2ea4e8c83e09c9890f6719914d7a2)

0 / 68
http://b1.ge.tt/gett/.../rarreg.key?index=0&user=anon-RVAe1SnzDvTr9ZSlT32GhEViMUQV49thIci61GNzA-&download=  (79e062c74263050dc1d52e5f4db720fb)

0 / 68
http://b1.ge.tt/gett/.../wPayPalChecker upload by zero hdz.exe  (wPayPalChecker.exe)

The following file have been seen to comunicate with b1.ge.tt in live environments.

TCP » 212.97.130.90:80
UCBrowser.exe (UC Browser by UCWeb)

jblob1.ge.tt

w145527248.b1.ge.tt

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.