home

get.tefriendham.bid

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
tefriendham.bid

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler
100.00%

The domain get.tefriendham.bid has been seen to resolve to the following 8 IP addresses.

54.230.193.208
server-54-230-193-208.iad53.r.cloudfront.net
September 2, 2016

54.230.193.159
server-54-230-193-159.iad53.r.cloudfront.net
September 2, 2016

54.230.193.137
server-54-230-193-137.iad53.r.cloudfront.net
September 2, 2016

54.230.193.118
server-54-230-193-118.iad53.r.cloudfront.net
September 2, 2016

54.230.193.114
server-54-230-193-114.iad53.r.cloudfront.net
September 2, 2016

54.230.193.79
server-54-230-193-79.iad53.r.cloudfront.net
September 2, 2016

54.230.193.74
server-54-230-193-74.iad53.r.cloudfront.net
September 2, 2016

54.230.193.209
server-54-230-193-209.iad53.r.cloudfront.net
September 2, 2016

File downloads found at URLs served by get.tefriendham.bid.

1 / 68      (PUP)
http://get.tefriendham.bid/?affId=1462&instId=803&appTitle=xLauncher Installator&s1=5612a0b124c95&s2=&s3=&appThxUrl=http://.../thankyou.php&c=1  (xlauncher installator.exe)

The following 2 files have been seen to comunicate with get.tefriendham.bid in live environments.

TCP » 54.230.193.137:443
online-guardian-v2.0.9.exe

TCP » 54.230.193.137:443
online-guardian-v2.0.9.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.