home

get.rmantconfusion.men

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
rmantconfusion.men

The domain get.rmantconfusion.men has been seen to resolve to the following 16 IP addresses.

54.230.193.92
server-54-230-193-92.iad53.r.cloudfront.net
September 14, 2016

54.230.193.33
server-54-230-193-33.iad53.r.cloudfront.net
September 14, 2016

54.230.193.10
server-54-230-193-10.iad53.r.cloudfront.net
September 14, 2016

54.230.193.253
server-54-230-193-253.iad53.r.cloudfront.net
September 14, 2016

54.230.193.225
server-54-230-193-225.iad53.r.cloudfront.net
September 14, 2016

54.230.193.204
server-54-230-193-204.iad53.r.cloudfront.net
September 14, 2016

54.230.193.136
server-54-230-193-136.iad53.r.cloudfront.net
September 14, 2016

54.230.193.98
server-54-230-193-98.iad53.r.cloudfront.net
September 14, 2016

52.84.125.134
server-52-84-125-134.iad16.r.cloudfront.net
September 1, 2016

52.84.125.109
server-52-84-125-109.iad16.r.cloudfront.net
September 1, 2016

52.84.125.69
server-52-84-125-69.iad16.r.cloudfront.net
September 1, 2016

52.84.125.68
server-52-84-125-68.iad16.r.cloudfront.net
September 1, 2016

52.84.125.8
server-52-84-125-8.iad16.r.cloudfront.net
September 1, 2016

52.84.125.254
server-52-84-125-254.iad16.r.cloudfront.net
September 1, 2016

52.84.125.185
server-52-84-125-185.iad16.r.cloudfront.net
September 1, 2016

52.84.125.170
server-52-84-125-170.iad16.r.cloudfront.net
September 1, 2016

File downloads found at URLs served by get.rmantconfusion.men.

1 / 68      (PUP)
http://get.rmantconfusion.men/?qBgMQ_SLASH_duvrboU8I1CeG9YacjQZrIxRpsh2eCx7mkbMo_EQUALS_  (agariohack hack setup.exe)

0 / 68
http://get.rmantconfusion.men/?e8xlN2Vd_PLUS_k4aJrUSnJqZrtAgclCBPlkxq69I4SJOx2Ek3y0e5bpxOxV6KhwRZdka&flp=1  (2c82bb62-dfdb-4468-48f1-b4397bfc44fe_1d1e8e1674b2055)

0 / 68
http://get.rmantconfusion.men/?gP88f9UfCo3q_SLASH_agFkWBxOuk32xk4oy6nNMkRMZz0JBwk3y0e5bpxOxV6KhwRZdka&flp=1  (scrap mechanic v0.1.26.rar)

0 / 68
http://get.rmantconfusion.men/?Y8MPJvr6fExrtOZnd_SLASH_8y98jPdY_PLUS_HwhHAeoPrcAcPwUsk3y0e5bpxOxV6KhwRZdka&flp=1  (426c368b-8936-04e4-a270-e3c5299f5f94_1d1e8e1020801c7)

The following 12 files have been seen to comunicate with get.rmantconfusion.men in live environments.

TCP » 52.84.125.170:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.170:443
whatsapptime.exe

TCP » 52.84.125.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.254:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.170:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.185:443
cpx.exe (Google Embedded Application)

TCP » 52.84.125.134:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.170:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.254:80
minionstribute_theme.crx

TCP » 52.84.125.68:80
browser.exe (Browser)

TCP » 52.84.125.68:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 54.230.193.225:80
new_chrome.exe (Google Chrome by Google)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.