home

get.owsaquamarine.men

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
owsaquamarine.men

The domain get.owsaquamarine.men has been seen to resolve to the following 17 IP addresses.

52.84.125.211
server-52-84-125-211.iad16.r.cloudfront.net
September 4, 2016

52.84.125.134
server-52-84-125-134.iad16.r.cloudfront.net
September 1, 2016

52.84.125.109
server-52-84-125-109.iad16.r.cloudfront.net
September 1, 2016

52.84.125.69
server-52-84-125-69.iad16.r.cloudfront.net
September 1, 2016

52.84.125.68
server-52-84-125-68.iad16.r.cloudfront.net
September 1, 2016

52.84.125.8
server-52-84-125-8.iad16.r.cloudfront.net
September 1, 2016

52.84.125.254
server-52-84-125-254.iad16.r.cloudfront.net
September 1, 2016

52.84.125.185
server-52-84-125-185.iad16.r.cloudfront.net
September 1, 2016

52.84.125.170
server-52-84-125-170.iad16.r.cloudfront.net
September 1, 2016

54.230.193.143
server-54-230-193-143.iad53.r.cloudfront.net
September 1, 2016

54.230.193.94
server-54-230-193-94.iad53.r.cloudfront.net
September 1, 2016

54.230.193.57
server-54-230-193-57.iad53.r.cloudfront.net
September 1, 2016

54.230.193.10
server-54-230-193-10.iad53.r.cloudfront.net
September 1, 2016

54.230.193.253
server-54-230-193-253.iad53.r.cloudfront.net
September 1, 2016

54.230.193.204
server-54-230-193-204.iad53.r.cloudfront.net
September 1, 2016

54.230.193.203
server-54-230-193-203.iad53.r.cloudfront.net
September 1, 2016

54.230.193.178
server-54-230-193-178.iad53.r.cloudfront.net
September 1, 2016

File downloads found at URLs served by get.owsaquamarine.men.

0 / 68
http://get.owsaquamarine.men/?M3XnMbk6i7ipOmH_SLASH_t2KsBxB9Mh_PLUS_4_SLASH_JkmvBolnlezR7Ek3y0e5bpxOxV6KhwRZdka&flp=1  (free_contoh_surat_pengunduran_diri.rar)

0 / 68
http://get.owsaquamarine.men/?MfcgqDpd2l8UQ0WXxaN8X2nbx8XvwHAZlPSMWKdhJUIk3y0e5bpxOxV6KhwRZdka&flp=1  (50d67172-d8c1-ee16-a1e8-746aa88736a6_1d1e8819cb1e1ac)

0 / 68
http://get.owsaquamarine.men/?828ONGvRVsGhZaHzZMuQwuJdJn5wMIHycPwc5dgAu7Uk3y0e5bpxOxV6KhwRZdka&flp=1  (condemned criminal origins download para pc.rar)

The following 14 files have been seen to comunicate with get.owsaquamarine.men in live environments.

TCP » 52.84.125.211:443
clearscreenplayerbrowser.exe

TCP » 52.84.125.211:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.170:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.170:443
whatsapptime.exe

TCP » 52.84.125.211:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.84.125.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.254:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.170:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.185:443
cpx.exe (Google Embedded Application)

TCP » 52.84.125.134:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.170:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.254:80
minionstribute_theme.crx

TCP » 52.84.125.68:80
browser.exe (Browser)

TCP » 52.84.125.68:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.