home

down6768.org

OutBrowse

Domain Information

The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GoDaddy.com, LLC

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Whois:
2 down6768.org records

The domain down6768.org has been seen to resolve to the following 2 IP addresses.

174.129.32.91
October 20, 2014

50.63.202.56
ip-50-63-202-56.ip.secureserver.net
September 11, 2014

The following 55 files have been seen to comunicate with down6768.org in live environments.

TCP » 50.63.202.56:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 50.63.202.56:80
shoppy-up.2.7-codedownloader.exe (Shoppy-Up.2.7 by Winportal)

TCP » 174.129.32.91:80
updater.exe

TCP » 50.63.202.56:80
20b9a285-202b-40f5-8dca-bdb3fa127f47-7.exe (SavePass 1.1 by OB)

TCP » 50.63.202.56:80
20b9a285-202b-40f5-8dca-bdb3fa127f47-11.exe (SavePass 1.1 by OB)

TCP » 50.63.202.56:80
476e068a-388e-4ec9-8130-3bcf1039e788-11.exe (SavePass 1.1 by OB)

TCP » 50.63.202.56:80
bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 50.63.202.56:80
20b9a285-202b-40f5-8dca-bdb3fa127f47-2.exe (SavePass 1.1 by OB)

TCP » 50.63.202.56:80
object browser-codedownloader.exe (Object Browser by ObjectB)

TCP » 50.63.202.56:80
i - cinema-codedownloader.exe (I - Cinema by DiscountFrenzy)

TCP » 50.63.202.56:80
{blocked}.exe (SavePass 1.1 by OB)

TCP » 50.63.202.56:80
online-guardian-v2.0.9.exe

TCP » 50.63.202.56:80
onlineguardian-v2.exe

TCP » 50.63.202.56:80
i - cinema-codedownloader.exe (I - Cinema by DiscountFrenzy)

TCP » 50.63.202.56:80
1575e8da-840a-43cb-99a1-fcbd9b37a9a2-6.exe (GoHD by InstallMoon)

TCP » 50.63.202.56:80
plushd-v1.9-nova.exe (PlusHD-V1.9 by PlusHDv1.9)

TCP » 50.63.202.56:80
3eafbf32-2904-4ab6-b67f-f546973d4e16-6.exe (SavePass 1.1 by OB)

TCP » 174.129.32.91:80
flvplayer.exe (VLC Player)

TCP » 50.63.202.56:80
41bfed2b-92ad-4ce6-aae1-acabe0b6cfc5-7.exe (SavePass 1.1 by OB)

TCP » 50.63.202.56:80
dhpdgxl.exe (TornPlusTV_version1.11 by Qwerty)

 
Latest 20 of 56 files

September 11, 2014
get.down6768.org

URL:
http://down6768.org/

Google Analytics:
UA-36968580

Title:
“Pay Per Install Network - RevenYou.com - Software Monetization”

Web server:
Microsoft-IIS/7.0 (ASP.NET) (Version: 4.0.30319)

down6768.net

outbrowse.com

revenyou.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.