home

get.eygoldbrick.men

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
eygoldbrick.men

The domain get.eygoldbrick.men has been seen to resolve to the following 17 IP addresses.

52.84.125.192
server-52-84-125-192.iad16.r.cloudfront.net
September 4, 2016

54.230.193.56
server-54-230-193-56.iad53.r.cloudfront.net
September 2, 2016

54.230.193.218
server-54-230-193-218.iad53.r.cloudfront.net
September 2, 2016

54.230.193.214
server-54-230-193-214.iad53.r.cloudfront.net
September 2, 2016

54.230.193.190
server-54-230-193-190.iad53.r.cloudfront.net
September 2, 2016

54.230.193.138
server-54-230-193-138.iad53.r.cloudfront.net
September 2, 2016

54.230.193.104
server-54-230-193-104.iad53.r.cloudfront.net
September 2, 2016

54.230.193.78
server-54-230-193-78.iad53.r.cloudfront.net
September 2, 2016

54.230.193.70
server-54-230-193-70.iad53.r.cloudfront.net
September 2, 2016

52.84.125.151
server-52-84-125-151.iad16.r.cloudfront.net
September 2, 2016

52.84.125.150
server-52-84-125-150.iad16.r.cloudfront.net
September 2, 2016

52.84.125.137
server-52-84-125-137.iad16.r.cloudfront.net
September 2, 2016

52.84.125.100
server-52-84-125-100.iad16.r.cloudfront.net
September 2, 2016

52.84.125.49
server-52-84-125-49.iad16.r.cloudfront.net
September 2, 2016

52.84.125.39
server-52-84-125-39.iad16.r.cloudfront.net
September 2, 2016

52.84.125.35
server-52-84-125-35.iad16.r.cloudfront.net
September 2, 2016

52.84.125.234
server-52-84-125-234.iad16.r.cloudfront.net
September 2, 2016

File downloads found at URLs served by get.eygoldbrick.men.

0 / 68
http://get.eygoldbrick.men/?8CjXt_PLUS_d3uUC8ho4y1P1kwREZCUn8QFEScG_SLASH_nCGfBl84k3y0e5bpxOxV6KhwRZdka&flp=1  (3dsjuegoid556rar.exe.img)

0 / 68
http://get.eygoldbrick.men/?xIBuJ2BgJSsMSffxLxJPg8RwFJiqPBdhXwYE_PLUS_SoaBZIk3y0e5bpxOxV6KhwRZdka&flp=1  (gta5_modmenuusb.img)

1 / 68      (PUP)
http://get.eygoldbrick.men/?mJdEt5bmzM8HcCu_PLUS_rZSD99nTMMchvc_PLUS_6glx6LVqrafw_EQUALS_  (combofix 2016 16.7.10.1 full.exe)

The following 17 files have been seen to comunicate with get.eygoldbrick.men in live environments.

TCP » 52.84.125.35:443
oozes.exe (Oozes)

TCP » 52.84.125.150:80
se.exe

TCP » 52.84.125.234:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.35:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.100:443
browser.exe (Speed Browser by Smart Applications)

TCP » 52.84.125.35:80
browser.exe (Browser)

TCP » 52.84.125.150:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.35:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.100:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.100:80
bbqleadsapplication.exe (NpApplication by Microsoft)

TCP » 52.84.125.234:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.234:443
browser.exe (Speed Browser by Long Mile Solutions)

TCP » 52.84.125.100:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.151:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.35:80
AdxEngine.exe (MPC AdCleaner by DotC United Inc)

TCP » 52.84.125.35:443
whatsapptime.exe

TCP » 52.84.125.100:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.150:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.150:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.192:443
online-guardian-v2.0.9.exe

 
Latest 20 of 39 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.