home

get.ngimposterh.men

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
ngimposterh.men

The domain get.ngimposterh.men has been seen to resolve to the following 25 IP addresses.

52.84.125.94
server-52-84-125-94.iad16.r.cloudfront.net
September 15, 2016

52.84.125.76
server-52-84-125-76.iad16.r.cloudfront.net
September 15, 2016

52.84.125.72
server-52-84-125-72.iad16.r.cloudfront.net
September 15, 2016

52.84.125.15
server-52-84-125-15.iad16.r.cloudfront.net
September 15, 2016

52.84.125.7
server-52-84-125-7.iad16.r.cloudfront.net
September 15, 2016

52.84.125.232
server-52-84-125-232.iad16.r.cloudfront.net
September 15, 2016

52.84.125.134
server-52-84-125-134.iad16.r.cloudfront.net
September 15, 2016

52.84.125.97
server-52-84-125-97.iad16.r.cloudfront.net
September 15, 2016

52.84.125.192
server-52-84-125-192.iad16.r.cloudfront.net
September 5, 2016

54.230.193.138
server-54-230-193-138.iad53.r.cloudfront.net
September 4, 2016

54.230.193.104
server-54-230-193-104.iad53.r.cloudfront.net
September 4, 2016

54.230.193.78
server-54-230-193-78.iad53.r.cloudfront.net
September 4, 2016

54.230.193.70
server-54-230-193-70.iad53.r.cloudfront.net
September 4, 2016

54.230.193.56
server-54-230-193-56.iad53.r.cloudfront.net
September 4, 2016

54.230.193.218
server-54-230-193-218.iad53.r.cloudfront.net
September 4, 2016

54.230.193.214
server-54-230-193-214.iad53.r.cloudfront.net
September 4, 2016

54.230.193.190
server-54-230-193-190.iad53.r.cloudfront.net
September 4, 2016

52.84.125.234
server-52-84-125-234.iad16.r.cloudfront.net
September 1, 2016

52.84.125.151
server-52-84-125-151.iad16.r.cloudfront.net
September 1, 2016

52.84.125.150
server-52-84-125-150.iad16.r.cloudfront.net
September 1, 2016

52.84.125.137
server-52-84-125-137.iad16.r.cloudfront.net
September 1, 2016

52.84.125.100
server-52-84-125-100.iad16.r.cloudfront.net
September 1, 2016

52.84.125.49
server-52-84-125-49.iad16.r.cloudfront.net
September 1, 2016

52.84.125.39
server-52-84-125-39.iad16.r.cloudfront.net
September 1, 2016

52.84.125.35
server-52-84-125-35.iad16.r.cloudfront.net
September 1, 2016

File downloads found at URLs served by get.ngimposterh.men.

0 / 68
http://get.ngimposterh.men/?3jIHrd9HONZT9B49tuYddqUzi8zQk3Hnpmwm7gPSaRwk3y0e5bpxOxV6KhwRZdka&flp=1  (adobe_flash_player.exe.img)

0 / 68
http://get.ngimposterh.men/?v_PLUS_fVP9A0zUaSf8e57AQ_SLASH_k_PLUS_Ke4FhyXRm8G0b4cEf1aeY_EQUALS_&flp=1  (grand theft auto v update. pc. reloaded. cracked torrent.img)

1 / 68      (PUP)
http://get.ngimposterh.men/?4_SLASH_CwXFZM9S1MOIxAbJQjdMI3JON_PLUS_Q3LqB4A5fWX3B_PLUS_c_EQUALS_  (setup.exe)

0 / 68
http://get.ngimposterh.men/?Zv2BwWdyYY77aEm_SLASH_XpU8hlRHIXoY_SLASH_RMaR52L7nt9y9Yk3y0e5bpxOxV6KhwRZdka&flp=1  (filenamezip.exe.img)

0 / 68
http://get.ngimposterh.men/?fZ5BpC1pS0DxWr_PLUS_HDxze_SLASH_RvHagZdZEOuFYwsshHLKm4k3y0e5bpxOxV6KhwRZdka&flp=1  (archive_182763.zip.exe.img)

0 / 68
http://get.ngimposterh.men/?t8_PLUS_F5kjlnOABTPHC_SLASH_4cx7psBL3KXWMTBWKh_SLASH_ApNhywwk3y0e5bpxOxV6KhwRZdka&flp=1  (adobe_flash_player.exe.img)

The following 29 files have been seen to comunicate with get.ngimposterh.men in live environments.

TCP » 52.84.125.94:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.76:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.97:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.35:443
oozes.exe (Oozes)

TCP » 52.84.125.76:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.150:80
se.exe

TCP » 52.84.125.15:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.84.125.234:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.35:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.97:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.100:443
browser.exe (Speed Browser by Smart Applications)

TCP » 52.84.125.35:80
browser.exe (Browser)

TCP » 52.84.125.97:80
browser.exe (Browser)

TCP » 52.84.125.97:443
browser.exe (Speed Browser by Smart Applications)

TCP » 52.84.125.15:80
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.150:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.35:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.7:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.84.125.100:80
browser.exe (speed browser by Smart Applications)

TCP » 52.84.125.100:80
bbqleadsapplication.exe (NpApplication by Microsoft)

 
Latest 20 of 73 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.