home

get.stankantea.bid

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
stankantea.bid

The domain get.stankantea.bid has been seen to resolve to the following 32 IP addresses.

54.230.193.48
server-54-230-193-48.iad53.r.cloudfront.net
September 15, 2016

54.230.193.35
server-54-230-193-35.iad53.r.cloudfront.net
September 15, 2016

54.230.193.21
server-54-230-193-21.iad53.r.cloudfront.net
September 15, 2016

54.230.193.156
server-54-230-193-156.iad53.r.cloudfront.net
September 15, 2016

54.230.193.132
server-54-230-193-132.iad53.r.cloudfront.net
September 15, 2016

54.230.193.115
server-54-230-193-115.iad53.r.cloudfront.net
September 15, 2016

54.230.193.81
server-54-230-193-81.iad53.r.cloudfront.net
September 15, 2016

54.230.193.78
server-54-230-193-78.iad53.r.cloudfront.net
September 15, 2016

52.84.125.176
server-52-84-125-176.iad16.r.cloudfront.net
September 2, 2016

52.84.125.106
server-52-84-125-106.iad16.r.cloudfront.net
September 2, 2016

52.84.125.105
server-52-84-125-105.iad16.r.cloudfront.net
September 2, 2016

52.84.125.232
server-52-84-125-232.iad16.r.cloudfront.net
September 2, 2016

52.84.125.231
server-52-84-125-231.iad16.r.cloudfront.net
September 2, 2016

52.84.125.220
server-52-84-125-220.iad16.r.cloudfront.net
September 2, 2016

52.84.125.210
server-52-84-125-210.iad16.r.cloudfront.net
September 2, 2016

52.84.125.208
server-52-84-125-208.iad16.r.cloudfront.net
September 2, 2016

54.192.19.132
server-54-192-19-132.iad12.r.cloudfront.net
August 30, 2016

54.192.19.131
server-54-192-19-131.iad12.r.cloudfront.net
August 30, 2016

54.192.19.113
server-54-192-19-113.iad12.r.cloudfront.net
August 30, 2016

54.192.19.110
server-54-192-19-110.iad12.r.cloudfront.net
August 30, 2016

54.192.19.80
server-54-192-19-80.iad12.r.cloudfront.net
August 30, 2016

54.192.19.246
server-54-192-19-246.iad12.r.cloudfront.net
August 30, 2016

54.192.19.245
server-54-192-19-245.iad12.r.cloudfront.net
August 30, 2016

54.192.19.194
server-54-192-19-194.iad12.r.cloudfront.net
August 30, 2016

52.84.125.248
server-52-84-125-248.iad16.r.cloudfront.net
August 18, 2016

52.84.125.207
server-52-84-125-207.iad16.r.cloudfront.net
August 18, 2016

52.84.125.201
server-52-84-125-201.iad16.r.cloudfront.net
August 18, 2016

52.84.125.193
server-52-84-125-193.iad16.r.cloudfront.net
August 18, 2016

52.84.125.178
server-52-84-125-178.iad16.r.cloudfront.net
August 18, 2016

52.84.125.148
server-52-84-125-148.iad16.r.cloudfront.net
August 18, 2016

 
Showing 30 of 32 IP Addresses

File downloads found at URLs served by get.stankantea.bid.

0 / 68
http://get.stankantea.bid/?PKOrsmnjb0am3FSGea8HmKnvTRz_SLASH_kDexOPfFQc0TpgVWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (empire earth.rar)

0 / 68
http://get.stankantea.bid/?PKOrsmnjb0YwmYL2VBfo0OlB07htsq1UJ2K9yHYlUZNWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (adobe_flash_player.exe.rar)

0 / 68
http://get.stankantea.bid/?PKOrsmnjb0YBfmWO2WPL1MKk5pznQHgOwoYG4ajaG1BWVuM5RDs4ZQ_EQUALS__EQUALS_&flp=1  (construction simulator 2015.rar)

1 / 68      (PUP)
http://get.stankantea.bid/?RyNq50zjWP4_PLUS_qO21aakq_PLUS_Rm006GVDBj6  (44cf4193-57b2-4464-d4fe-41828844cef6_1d1e33f62a6878f)

1 / 68      (PUP)
http://get.stankantea.bid/?bXmKpS7KHt5aG8wPcupc8DyscYNO83cX  (ffe61378-c80c-de8b-9ac2-1e780d236486_1d1e33f7642bdb1)

The following 133 files have been seen to comunicate with get.stankantea.bid in live environments.

TCP » 54.192.19.132:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.19.113:80
uncheckithelper.exe (Uncheckit Module by EVANGEL TECHNOLOGY (HK) LIMITED)

TCP » 52.84.125.110:443
client.exe (ClientWrapper)

TCP » 54.192.19.194:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.207:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.207:80
Client.exe

TCP » 54.192.19.131:80
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.176:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.230.193.156:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.231:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.131:80
interhop.exe

TCP » 52.84.125.210:443
browser.exe (Browser)

TCP » 54.192.19.113:80
gubed.exe

TCP » 54.192.19.113:443
jingling.exe

TCP » 54.192.19.194:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.19.245:80
emuletorrent.exe

TCP » 54.192.19.110:80
ed2k.exe (aMule by http://www.amule.org/)

TCP » 54.192.19.245:443
online-guardian-v2.0.9.exe

TCP » 52.84.125.201:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.192.19.194:80
apptrailers.exe

 
Latest 20 of 220 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.