home

estatico.cyrela.com.br

Felipe Maia Gomide

Domain Information

The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
cyrela.com.br

Whois:
1 cyrela.com.br record

The domain estatico.cyrela.com.br has been seen to resolve to the following 8 IP addresses.

52.84.125.146
server-52-84-125-146.iad16.r.cloudfront.net
August 8, 2016

52.84.125.33
server-52-84-125-33.iad16.r.cloudfront.net
August 8, 2016

52.84.125.32
server-52-84-125-32.iad16.r.cloudfront.net
August 8, 2016

52.84.125.233
server-52-84-125-233.iad16.r.cloudfront.net
August 8, 2016

52.84.125.232
server-52-84-125-232.iad16.r.cloudfront.net
August 8, 2016

52.84.125.216
server-52-84-125-216.iad16.r.cloudfront.net
August 8, 2016

52.84.125.203
server-52-84-125-203.iad16.r.cloudfront.net
August 8, 2016

52.84.125.193
server-52-84-125-193.iad16.r.cloudfront.net
August 8, 2016

File downloads found at URLs served by estatico.cyrela.com.br.

0 / 68
http://estatico.cyrela.com.br/Files/Imagens/Imoveis/503/.../way-orquidario-plantas-130620161849.zip  (a44712953ab0077014a711f7d20d9c8b)

The following 20 files have been seen to comunicate with estatico.cyrela.com.br in live environments.

TCP » 52.84.125.146:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.203:443
strummer.exe (Strummer)

TCP » 52.84.125.216:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.216:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.146:443
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.193:443
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 52.84.125.216:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.193:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.203:443
stormwatchapp.exe

TCP » 52.84.125.203:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.203:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.232:443
Client.exe

TCP » 52.84.125.232:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.84.125.33:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.146:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.193:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.193:443
playthruplayer.exe (Playthru Player)

TCP » 52.84.125.203:443
scrubbing.exe (Scrubbing)

TCP » 52.84.125.203:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.84.125.216:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 41 files

URL:
http://estatico.cyrela.com.br/

Network:
Amazon Cloudfront

Web server:
Microsoft-IIS/8.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.