home

get.ayattribu.space

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ayattribu.space

The domain get.ayattribu.space has been seen to resolve to the following 17 IP addresses.

52.85.131.43
server-52-85-131-43.iad53.r.cloudfront.net
May 25, 2016

52.85.131.253
server-52-85-131-253.iad53.r.cloudfront.net
May 24, 2016

52.85.131.180
server-52-85-131-180.iad53.r.cloudfront.net
May 24, 2016

52.85.131.154
server-52-85-131-154.iad53.r.cloudfront.net
May 24, 2016

52.85.131.150
server-52-85-131-150.iad53.r.cloudfront.net
May 24, 2016

52.85.131.86
server-52-85-131-86.iad53.r.cloudfront.net
May 24, 2016

52.85.131.24
server-52-85-131-24.iad53.r.cloudfront.net
May 24, 2016

52.85.131.16
server-52-85-131-16.iad53.r.cloudfront.net
May 24, 2016

52.85.131.10
server-52-85-131-10.iad53.r.cloudfront.net
May 24, 2016

52.84.125.80
server-52-84-125-80.iad16.r.cloudfront.net
May 23, 2016

52.84.125.35
server-52-84-125-35.iad16.r.cloudfront.net
May 23, 2016

52.84.125.233
server-52-84-125-233.iad16.r.cloudfront.net
May 23, 2016

52.84.125.212
server-52-84-125-212.iad16.r.cloudfront.net
May 23, 2016

52.84.125.131
server-52-84-125-131.iad16.r.cloudfront.net
May 23, 2016

52.84.125.130
server-52-84-125-130.iad16.r.cloudfront.net
May 23, 2016

52.84.125.127
server-52-84-125-127.iad16.r.cloudfront.net
May 23, 2016

52.84.125.83
server-52-84-125-83.iad16.r.cloudfront.net
May 23, 2016

File downloads found at URLs served by get.ayattribu.space.

0 / 68
http://get.ayattribu.space/?s=co&ses=289291452150791936&flp=1  (mslsl_alkartwn_mawkla_fta_aladghal_mdblg.exe.rar)

0 / 68
http://get.ayattribu.space/?s=co&ses=980341781862080096&flp=1  (autocad.exe.rar)

0 / 68
http://get.ayattribu.space/?s=co&ses=205023520160466432&flp=1  (santy_ray.exe.zip)

0 / 68
http://get.ayattribu.space/?s=co&ses=462190460413694400&flp=1  (crack setup.exe.zip)

0 / 68
http://get.ayattribu.space/?s=co&ses=766007147263735520&flp=1  (nihdk.part01.rar.exe.rar)

0 / 68
http://get.ayattribu.space/?s=co&ses=34697960596531584&flp=1  (nihdk.part03.rar.exe.rar)

The following 16 files have been seen to comunicate with get.ayattribu.space in live environments.

TCP » 52.84.125.35:443
oozes.exe (Oozes)

TCP » 52.84.125.80:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.84.125.35:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.35:80
browser.exe (Browser)

TCP » 52.84.125.131:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.131:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.35:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.80:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.127:80
browser.exe (Browser)

TCP » 52.84.125.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.131.10:443
browser.exe (Browser)

TCP » 52.84.125.130:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.131:443
onlineguardian-v2.exe

TCP » 52.84.125.127:80
geniecleaner.exe (Genie Cleaner by Oppoos.com)

TCP » 52.84.125.212:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.212:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.35:80
AdxEngine.exe (MPC AdCleaner by DotC United Inc)

TCP » 52.84.125.35:443
whatsapptime.exe

TCP » 52.84.125.80:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.83:80
parishoners.exe (Parishoners)

 
Latest 20 of 36 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.