home

go.ntruthlu.space

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ntruthlu.space

The domain go.ntruthlu.space has been seen to resolve to the following 24 IP addresses.

52.84.125.251
server-52-84-125-251.iad16.r.cloudfront.net
August 20, 2016

52.84.125.241
server-52-84-125-241.iad16.r.cloudfront.net
August 20, 2016

52.84.125.218
server-52-84-125-218.iad16.r.cloudfront.net
August 20, 2016

52.84.125.156
server-52-84-125-156.iad16.r.cloudfront.net
August 20, 2016

52.84.125.139
server-52-84-125-139.iad16.r.cloudfront.net
August 20, 2016

52.84.125.29
server-52-84-125-29.iad16.r.cloudfront.net
August 20, 2016

52.84.125.14
server-52-84-125-14.iad16.r.cloudfront.net
August 20, 2016

52.84.125.11
server-52-84-125-11.iad16.r.cloudfront.net
August 20, 2016

52.85.142.216
server-52-85-142-216.iad12.r.cloudfront.net
May 31, 2016

52.85.142.182
server-52-85-142-182.iad12.r.cloudfront.net
May 31, 2016

52.85.142.125
server-52-85-142-125.iad12.r.cloudfront.net
May 31, 2016

52.85.142.113
server-52-85-142-113.iad12.r.cloudfront.net
May 31, 2016

52.85.142.56
server-52-85-142-56.iad12.r.cloudfront.net
May 31, 2016

52.85.142.42
server-52-85-142-42.iad12.r.cloudfront.net
May 31, 2016

52.85.142.24
server-52-85-142-24.iad12.r.cloudfront.net
May 31, 2016

52.85.142.226
server-52-85-142-226.iad12.r.cloudfront.net
May 31, 2016

52.85.131.60
server-52-85-131-60.iad53.r.cloudfront.net
May 27, 2016

52.85.131.14
server-52-85-131-14.iad53.r.cloudfront.net
May 27, 2016

52.85.131.208
server-52-85-131-208.iad53.r.cloudfront.net
May 27, 2016

52.85.131.202
server-52-85-131-202.iad53.r.cloudfront.net
May 27, 2016

52.85.131.151
server-52-85-131-151.iad53.r.cloudfront.net
May 27, 2016

52.85.131.142
server-52-85-131-142.iad53.r.cloudfront.net
May 27, 2016

52.85.131.141
server-52-85-131-141.iad53.r.cloudfront.net
May 27, 2016

52.85.131.119
server-52-85-131-119.iad53.r.cloudfront.net
May 27, 2016

File downloads found at URLs served by go.ntruthlu.space.

0 / 68
http://go.ntruthlu.space/?s=co&ses=450738108716905088&flp=1  (evilangel-password-generator.exe.iso)

0 / 68
http://go.ntruthlu.space/?s=co&ses=457765209022909376&flp=1  (download film ada apa dengan cinta 2 full hd.exe.iso)

0 / 68
http://go.ntruthlu.space/?s=co&ses=71243562735617152&flp=1  (app nanahack hack setup.exe.iso)

The following 29 files have been seen to comunicate with go.ntruthlu.space in live environments.

TCP » 52.85.142.216:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.216:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.216:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.182:80
UCBrowser.exe (by UCWeb)

TCP » 52.84.125.11:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.14:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.56:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.14:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.42:80
ssn.exe (ssn)

TCP » 52.85.142.125:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.85.142.56:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.56:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.156:80
Client.exe

TCP » 52.84.125.218:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.241:443
browser.exe (Browser)

TCP » 52.84.125.251:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.84.125.11:80
browser.exe (Browser)

TCP » 52.84.125.11:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.84.125.139:80
browser.exe (Browser)

TCP » 52.84.125.156:80
Client.exe

 
Latest 20 of 65 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.