home

get.magneticcle.bid

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
magneticcle.bid

The domain get.magneticcle.bid has been seen to resolve to the following 32 IP addresses.

52.84.125.220
server-52-84-125-220.iad16.r.cloudfront.net
September 2, 2016

52.84.125.210
server-52-84-125-210.iad16.r.cloudfront.net
September 2, 2016

52.84.125.208
server-52-84-125-208.iad16.r.cloudfront.net
September 2, 2016

52.84.125.176
server-52-84-125-176.iad16.r.cloudfront.net
September 2, 2016

52.84.125.106
server-52-84-125-106.iad16.r.cloudfront.net
September 2, 2016

52.84.125.105
server-52-84-125-105.iad16.r.cloudfront.net
September 2, 2016

52.84.125.232
server-52-84-125-232.iad16.r.cloudfront.net
September 2, 2016

52.84.125.231
server-52-84-125-231.iad16.r.cloudfront.net
September 2, 2016

54.230.193.80
server-54-230-193-80.iad53.r.cloudfront.net
August 29, 2016

54.230.193.46
server-54-230-193-46.iad53.r.cloudfront.net
August 29, 2016

54.230.193.242
server-54-230-193-242.iad53.r.cloudfront.net
August 29, 2016

54.230.193.187
server-54-230-193-187.iad53.r.cloudfront.net
August 29, 2016

54.230.193.185
server-54-230-193-185.iad53.r.cloudfront.net
August 29, 2016

54.230.193.176
server-54-230-193-176.iad53.r.cloudfront.net
August 29, 2016

54.230.193.147
server-54-230-193-147.iad53.r.cloudfront.net
August 29, 2016

54.230.193.81
server-54-230-193-81.iad53.r.cloudfront.net
August 29, 2016

52.84.125.148
server-52-84-125-148.iad16.r.cloudfront.net
August 18, 2016

52.84.125.110
server-52-84-125-110.iad16.r.cloudfront.net
August 18, 2016

52.84.125.90
server-52-84-125-90.iad16.r.cloudfront.net
August 18, 2016

52.84.125.248
server-52-84-125-248.iad16.r.cloudfront.net
August 18, 2016

52.84.125.207
server-52-84-125-207.iad16.r.cloudfront.net
August 18, 2016

52.84.125.201
server-52-84-125-201.iad16.r.cloudfront.net
August 18, 2016

52.84.125.193
server-52-84-125-193.iad16.r.cloudfront.net
August 18, 2016

52.84.125.178
server-52-84-125-178.iad16.r.cloudfront.net
August 18, 2016

54.192.19.147
server-54-192-19-147.iad12.r.cloudfront.net
August 18, 2016

54.192.19.117
server-54-192-19-117.iad12.r.cloudfront.net
August 18, 2016

54.192.19.101
server-54-192-19-101.iad12.r.cloudfront.net
August 18, 2016

54.192.19.88
server-54-192-19-88.iad12.r.cloudfront.net
August 18, 2016

54.192.19.61
server-54-192-19-61.iad12.r.cloudfront.net
August 18, 2016

54.192.19.20
server-54-192-19-20.iad12.r.cloudfront.net
August 18, 2016

 
Showing 30 of 32 IP Addresses

File downloads found at URLs served by get.magneticcle.bid.

0 / 68
http://get.magneticcle.bid/?PKOrsmnjb0ZG_PLUS_8IbAgf_PLUS_gejqKVoqg8fInf3YqbWzJWJWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (the game.rar)

2 / 68      (PUP)
http://get.magneticcle.bid/?ft_PLUS_ZzPp_SLASH_AmquMp3aJMH73x4qIM6f7nMj  (extreme karaoke 2016 full.exe)

0 / 68
http://get.magneticcle.bid/?PKOrsmnjb0bZBfk7Ou4NNFnKQfyL2m_PLUS_BXtk95pbBGVxWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.iso)

0 / 68
http://get.magneticcle.bid/?PKOrsmnjb0YIZyeJ7FQesAAFbO_PLUS_D101XG6yg1910ofZWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (autocad.exe.iso)

0 / 68
http://get.magneticcle.bid/?PKOrsmnjb0ZEq8swWwHH0DL1no27p7YjUDdZvi4x4tVWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (03f5f10c-1fdc-0c22-db2a-e7da78ff675d_1d1e2b0430ef430)

0 / 68
http://get.magneticcle.bid/?PKOrsmnjb0Z_PLUS_idhXfjXPpkz9hhS64bz_SLASH_N3K6LnIfIvNWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (2c4c41da-6e8b-0d60-c27d-40b0841cca65_1d1e2b0c68c216f)

0 / 68
http://get.magneticcle.bid/?PKOrsmnjb0ZU8QMp_SLASH_j0Qcsx_PLUS_vlk3iUdy3sRAi_SLASH_bPT5JWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (assassins creed 1 game.rar)

The following 160 files have been seen to comunicate with get.magneticcle.bid in live environments.

TCP » 54.192.19.147:80
parishoners.exe (Parishoners)

TCP » 52.84.125.110:443
client.exe (ClientWrapper)

TCP » 54.192.19.117:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.101:80
saber.exe

TCP » 54.192.19.117:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.207:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.207:80
Client.exe

TCP » 54.192.19.101:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.101:443
online-guardian-v2.0.9.exe

TCP » 54.192.19.20:80
saber.exe

TCP » 54.192.19.88:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.176:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.231:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.250:80
smu.exe (W by Search Module)

TCP » 52.84.125.210:443
browser.exe (Browser)

TCP » 54.192.19.240:80
whatsapptime.exe

TCP » 54.192.19.101:80
cktSvc.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 54.192.19.147:80
browser.exe (Speed Browser by Smart Applications)

TCP » 52.84.125.201:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.193:443
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

 
Latest 20 of 266 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.