home

get.groanferment.bid

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
groanferment.bid

The domain get.groanferment.bid has been seen to resolve to the following 34 IP addresses.

52.84.125.123
server-52-84-125-123.iad16.r.cloudfront.net
September 18, 2016

52.84.125.89
server-52-84-125-89.iad16.r.cloudfront.net
September 18, 2016

52.84.125.27
server-52-84-125-27.iad16.r.cloudfront.net
September 18, 2016

52.84.125.228
server-52-84-125-228.iad16.r.cloudfront.net
September 18, 2016

52.84.125.192
server-52-84-125-192.iad16.r.cloudfront.net
September 18, 2016

52.84.125.177
server-52-84-125-177.iad16.r.cloudfront.net
September 18, 2016

52.84.125.163
server-52-84-125-163.iad16.r.cloudfront.net
September 18, 2016

52.84.125.42
server-52-84-125-42.iad16.r.cloudfront.net
August 18, 2016

52.84.125.19
server-52-84-125-19.iad16.r.cloudfront.net
August 18, 2016

52.84.125.243
server-52-84-125-243.iad16.r.cloudfront.net
August 18, 2016

52.84.125.238
server-52-84-125-238.iad16.r.cloudfront.net
August 18, 2016

52.84.125.170
server-52-84-125-170.iad16.r.cloudfront.net
August 18, 2016

52.84.125.152
server-52-84-125-152.iad16.r.cloudfront.net
August 18, 2016

52.84.125.74
server-52-84-125-74.iad16.r.cloudfront.net
August 18, 2016

52.84.125.44
server-52-84-125-44.iad16.r.cloudfront.net
August 18, 2016

52.84.125.241
server-52-84-125-241.iad16.r.cloudfront.net
August 16, 2016

52.84.125.227
server-52-84-125-227.iad16.r.cloudfront.net
August 16, 2016

52.84.125.194
server-52-84-125-194.iad16.r.cloudfront.net
August 16, 2016

52.84.125.184
server-52-84-125-184.iad16.r.cloudfront.net
August 16, 2016

52.84.125.87
server-52-84-125-87.iad16.r.cloudfront.net
August 16, 2016

52.84.125.249
server-52-84-125-249.iad16.r.cloudfront.net
August 16, 2016

52.84.125.64
server-52-84-125-64.iad16.r.cloudfront.net
August 15, 2016

52.84.125.25
server-52-84-125-25.iad16.r.cloudfront.net
August 15, 2016

52.84.125.153
server-52-84-125-153.iad16.r.cloudfront.net
August 15, 2016

52.84.125.145
server-52-84-125-145.iad16.r.cloudfront.net
August 15, 2016

52.84.125.103
server-52-84-125-103.iad16.r.cloudfront.net
August 15, 2016

52.84.125.190
server-52-84-125-190.iad16.r.cloudfront.net
August 13, 2016

52.84.125.173
server-52-84-125-173.iad16.r.cloudfront.net
August 13, 2016

52.84.125.168
server-52-84-125-168.iad16.r.cloudfront.net
August 13, 2016

52.84.125.97
server-52-84-125-97.iad16.r.cloudfront.net
August 13, 2016

 
Showing 30 of 34 IP Addresses

File downloads found at URLs served by get.groanferment.bid.

0 / 68
http://get.groanferment.bid/?PKOrsmnjb0YdYWFAm2Ud6zlTCjefQlRaH5P_PLUS_ofH2fvlWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

3 / 68      (PUP)
http://get.groanferment.bid/?0Ep7ve_PLUS_e_PLUS_mDDvwVGPquCnmZP9Y2SGmDl  (Direk_indir.exe)

0 / 68
http://get.groanferment.bid/?PKOrsmnjb0ah3j393xmSX4MD9CIb0D5mlMyY2mxTwDRWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

0 / 68
http://get.groanferment.bid/?PKOrsmnjb0aCP_PLUS_Rmj_PLUS_kJxNoh2bOB8TwcYhqH6YRAfulWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

0 / 68
http://get.groanferment.bid/?PKOrsmnjb0ZZPezzNXrwKU4DhIxsKxsldbsK_PLUS_R_PLUS_yWoBWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

0 / 68
http://get.groanferment.bid/?PKOrsmnjb0b8ydXHDDoxVq1ZqwRuKKQVEjG4N3QciHlWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

0 / 68
http://get.groanferment.bid/?PKOrsmnjb0ZEOgIn5LPNZ5CpA_SLASH_idd2bpy2wlP_PLUS_gNHQlWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (savatage hall of the mountain king rar.rar)

The following 43 files have been seen to comunicate with get.groanferment.bid in live environments.

TCP » 52.84.125.173:443
Client.exe

TCP » 52.84.125.25:80
crossbrowse.exe (Crossbrowse)

TCP » 52.84.125.207:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.249:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 52.84.125.97:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.207:80
Client.exe

TCP » 52.84.125.74:443
browser.exe (Browser)

TCP » 52.84.125.42:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.89:443
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.145:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.173:443
clearscreenplayerbrowser.exe

TCP » 52.84.125.64:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.96:80
clearscreenplayerbrowser.exe

TCP » 52.84.125.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.170:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.170:443
whatsapptime.exe

TCP » 52.84.125.19:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.64:443
megacubo.exe (Megacubo by www.megacubo.net)

TCP » 52.84.125.64:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.84.125.97:80
browser.exe (Browser)

 
Latest 20 of 138 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.