home

get.ogtoothdi.bid

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
ogtoothdi.bid

The domain get.ogtoothdi.bid has been seen to resolve to the following 40 IP addresses.

54.192.19.168
server-54-192-19-168.iad12.r.cloudfront.net
September 1, 2016

54.192.19.167
server-54-192-19-167.iad12.r.cloudfront.net
September 1, 2016

54.192.19.127
server-54-192-19-127.iad12.r.cloudfront.net
September 1, 2016

54.192.19.98
server-54-192-19-98.iad12.r.cloudfront.net
September 1, 2016

54.192.19.41
server-54-192-19-41.iad12.r.cloudfront.net
September 1, 2016

54.192.19.30
server-54-192-19-30.iad12.r.cloudfront.net
September 1, 2016

54.192.19.11
server-54-192-19-11.iad12.r.cloudfront.net
September 1, 2016

54.192.19.254
server-54-192-19-254.iad12.r.cloudfront.net
September 1, 2016

52.84.125.249
server-52-84-125-249.iad16.r.cloudfront.net
August 15, 2016

52.84.125.227
server-52-84-125-227.iad16.r.cloudfront.net
August 15, 2016

52.84.125.87
server-52-84-125-87.iad16.r.cloudfront.net
August 15, 2016

52.84.125.103
server-52-84-125-103.iad16.r.cloudfront.net
August 15, 2016

52.84.125.64
server-52-84-125-64.iad16.r.cloudfront.net
August 15, 2016

52.84.125.25
server-52-84-125-25.iad16.r.cloudfront.net
August 15, 2016

52.84.125.153
server-52-84-125-153.iad16.r.cloudfront.net
August 15, 2016

52.84.125.145
server-52-84-125-145.iad16.r.cloudfront.net
August 15, 2016

52.85.131.143
server-52-85-131-143.iad53.r.cloudfront.net
August 13, 2016

52.85.131.78
server-52-85-131-78.iad53.r.cloudfront.net
August 13, 2016

52.85.131.68
server-52-85-131-68.iad53.r.cloudfront.net
August 13, 2016

52.85.131.42
server-52-85-131-42.iad53.r.cloudfront.net
August 13, 2016

52.85.131.32
server-52-85-131-32.iad53.r.cloudfront.net
August 13, 2016

52.85.131.21
server-52-85-131-21.iad53.r.cloudfront.net
August 13, 2016

52.85.131.16
server-52-85-131-16.iad53.r.cloudfront.net
August 13, 2016

52.85.131.160
server-52-85-131-160.iad53.r.cloudfront.net
August 13, 2016

54.192.19.18
server-54-192-19-18.iad12.r.cloudfront.net
August 13, 2016

54.192.19.195
server-54-192-19-195.iad12.r.cloudfront.net
August 13, 2016

54.192.19.189
server-54-192-19-189.iad12.r.cloudfront.net
August 13, 2016

54.192.19.148
server-54-192-19-148.iad12.r.cloudfront.net
August 13, 2016

54.192.19.132
server-54-192-19-132.iad12.r.cloudfront.net
August 13, 2016

54.192.19.95
server-54-192-19-95.iad12.r.cloudfront.net
August 13, 2016

 
Showing 30 of 40 IP Addresses

File downloads found at URLs served by get.ogtoothdi.bid.

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0ZNjlQKh0GwogUEFKmof2Tu1_SLASH_jEQtib8b5WVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0ba7fgwF_SLASH_7sn8tAdU8ytxTeMt_PLUS_S6vYoLE1WVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (android apk download.rar)

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0bgGfO6LbWGn1MkCvFLyFFvBZMdjuB2nfNWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (resetter printer canon terbaru- service tool versi 3400.rar)

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0bdnPR2nU3O1pt5kSGmhpQ_SLASH_ImFVGsg_SLASH_bxlWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (androdumpper.ver.1.30.b.af.apk.iso)

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0b3pzrqK6r9_SLASH_0sWgDAd5bhelBsA6MlVZNxWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (bluestacks v2.0.exe.rar)

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0asRAGHwrZLNQYVuOhPV8oYoUnNbfczpTNWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (28a7260f-b76e-0b14-09a1-7a17f948f006_1d1e00b3e5f896e)

0 / 68
http://get.ogtoothdi.bid/?PKOrsmnjb0asUf8NVKr1bdW7UIjpr7AjhgI6zdFgw4VWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (gta 5.rar)

The following 232 files have been seen to comunicate with get.ogtoothdi.bid in live environments.

TCP » 52.84.125.173:443
Client.exe

TCP » 54.192.19.168:443
u1603.exe

TCP » 54.192.19.148:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.11:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.11:80
UCBrowser.exe (by UCWeb)

TCP » 54.192.19.167:80
browser.exe (Browser)

TCP » 54.192.19.148:80
notification.exe

TCP » 54.192.19.127:80
browser.exe (Browser)

TCP » 54.192.19.132:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.127:80
qkseeSvc.exe (qksee by Qksee Pvt)

TCP » 54.192.19.254:80
uvconverter.exe

TCP » 54.192.19.195:443
jingling.exe

TCP » 54.192.19.167:80
uvconverter.exe

TCP » 54.192.19.148:80
saber.exe

TCP » 54.192.19.168:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.167:80
uvconverter.exe

TCP » 54.192.19.11:80
saber.exe

TCP » 54.192.19.18:80
uvconverter.exe

TCP » 54.192.19.168:80
saber.exe

TCP » 52.84.125.25:80
crossbrowse.exe (Crossbrowse)

 
Latest 20 of 400 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.